FEATURED VIDEO

Sponsored By:


SLIDE SHOWS
These up-and-coming storage companies from the 2008 CRN Emerging Vendor list have a winning view on the storage space.
Solution providers interested in a refreshing take on VoIP from young, up-and-coming companies need look no further. The 2008 CRN Emerging Vendor list includes six VoIP vendors on the rise.
We picked the top of the line. Check out the these companies, selected from our database of 178 emerging vendors.
INSIDE CHANNELWEB
techcareers logo Search Jobs:


  

Post Resume|Employers

Recent Post:


Semiconductor Sales
Infinity Sales seeking Semiconductor Sales in Woodland Hills, CA
spacer

BLOGS
The Apple Channel
February 20, 2008
McAfee Avert Labs Blogger Jimmy Shah identified a Denial of Service vulnerability in the iPhone's Safari browser in a blog post on Wednesday.

"The researchers who found the vulnerability were looking for a method to unlock the filesystem on iPhones with the latest firmware (1.1.3). Unlocking the file system allows the installing of custom ringtones and third party applications. With the last firmware version you could automatically unlock your iPhone by visiting a particular website with the Mobile Safari browser," Shah wrote.

The DoS vulnerability can be exploited by visiting the proof of concept page and clicking a button that will launch a warning and the exploit code will run. The iPhone is then unresponsive before rebooting a less than a minute later, Shah wrote.

"The DoS bug exploit is partially based on JavaScript code from the Month of Browser Bugs(MOBB). During the MOBB a group of security researchers released an exploit for a web browser vulnerability every single day. While the original exploit was targeted at desktop browsers, the modified version simply attempts to fill memory and crash the phone," he wrote. The bug will only prevent you from using the iPhone temporarily and doesn't steal data or permanently damage the iPhone. The proof of concept requires user interaction, by pressing the "Go" button that appears, but "a more malicious site could run the code without permission," he wrote.

"It's possible to avoid the DoS vulnerability, at the cost of not being able to access certain web applications. JavaScript can be disabled by going to Home, Settings, Safari."

Apple's Web site also shows users how to secure Safari.

Posted by Jennifer Lawinski at 5:54 PM
CHANNELWEB MARKETSPACE >> (Sponsored Links)
ADVERTISEMENT




CHANNEL SERVICES >>