When tested by incorporating it into the App Store, it turns out that Apple's security tests do not detect that the program is malicious, and passed. Currently there is not evidence that any meddling hands that exploit this vulnerability in iOS software. However, the presence of this trial, now open the possibility of malware on the App Store. Miller said he proved his theory by building a stock-market monitoring tool, InstaStock, that was programed to connect to his server once downloaded, and to then download whatever program he wants.
Apple did not respond to requests for comment.
Miller, who in 2009 identified a bug in the iPhone text-messaging system that allowed attackers to gain remote control over the devices, said that he had contacted the company about the vulnerability.
"They are in the process of fixing it," he said.
Miller is scheduled to present his detailed research at the SyScan '11 security conference in Taiwan next week.

0 Responses to “Researchers found a bug in iPhone software”
Post a Comment