Web code locks up iPhones and iPod Touch
A new exploit will either lock up your iPhone or iPod Touch or crash your Safari browser on your PC or Mac OS desktop if you simply visit a maliciously coded Web site. Unlike an earlier exploit that required users to click to become infected, the new code published by iPhoneWorld requires no user interaction.
So far, Apple has had no comment.
The code was first reported in January and exhausts the memory in Safari, which in turn will cause your iPhone or iPod Touch to freeze, or your desktop Safari to crash. "Given the nature of this issue," said the BugTraq newsgroup vulnerability report, "remote code execution may also be possible, but this has not been confirmed."
There is no patch available from Apple. The recommended workaround is to disable Javascript within Safari. To do so:
-
1. Under Edit, click Preferences.
2. Click the Security icon.
3. Uncheck Enable JavaScript.
4. Close and restart Safari.
- Topics:
-
Security
- Tags:
-
security,
-
Apple,
-
Iphone,
-
Ipod Touch,
-
Safari,
-
memory exhaustion,
-
DoS,
-
crash,
-
iPhoneWorld
- Bookmark:
- Digg
- Del.icio.us
trouble with Safari or my iPhone... both are used daily and often.
But then again, I don't visit the kind of sites that might bring on
this sort of attack either. Maybe this report is a little overstated?
exploit work with the new release?
Does it work on the older 2.x Safari as well? What about 1.x?
It will be fun seeing how Apple and it`s fanboys try and spin all the attacks that are just starting , and there will be many more to come.
mentioned ipod touch and iphone, but your only focus was with the computer-versions of safari...