iOS 6 Fixes SMS Security Flaws Found By Pod2g

Posted September 20, 2012 at 6:48am by iClarified | Please help us and submit a translation by clicking here | 11346 views

Apple has fixed both iOS SMS security flaws found by pod2g with the release of iOS 6, reports the hacker.

"Apple has fixed both SMS issues I found in iOS 6. Good job and thanks to them," tweeted pod2g.

-----
Telephony
● Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
● Impact: An SMS message may appear to have been sent by an arbitrary user
● Description: Messages displayed the return address of an SMS message as the sender. Return addresses may be spoofed. This issue was addressed by always displaying the originating address instead of the return address.
● CVE-ID - CVE-2012-3744 : pod2g
-----
Telephony
● Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
● Impact: An SMS message may disrupt cellular connectivity
● Description: An off-by-one buffer overflow existed in the handling of SMS user data headers. This issue was addressed through improved bounds checking.
● CVE-ID - CVE-2012-3745 : pod2g
-----

You can read the full list of security updates in iOS 6 here.


Share
Add Comment
Follow iClarified
Apple Updates Pages, Numbers, and Keynote With Stability Improvements, Bug Fixes
Tempo Smart Calendar App Gets Updated With Uber Integration
The Tempo Smart Calendar app has been updated...
Sprint Launches New $60 Unlimited Plan
Sprint has announced its new Sprint $60 Unlim...
iCloud Services Are Down for Some Users
iCloud Services are down for some users, acco...
Apple Updates iTunes 12 Beta With Minor Design Improvements
Apple has updated iTunes 12 Beta today with m...