----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
Apple iPhone Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA26287

VERIFY ADVISORY:
http://secunia.com/advisories/26287/

CRITICAL:
Highly critical

IMPACT:
Cross Site Scripting, Spoofing, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Apple iPhone 1.x
http://secunia.com/product/15128/

DESCRIPTION:
Some vulnerabilities have been reported in Apple iPhone, which can be
exploited by malicious people to conduct cross-site scripting and
spoofing attacks, and potentially to compromise a vulnerable system.

1) A race condition error when updating a page in combination with
HTTP redirection may allow Javascript code from one page to modify a
redirected page.

2) A boundary error in the Perl Compatible Regular Expressions (PCRE)
library used by the Javascript engine in Safari can be exploited to
cause a heap-based buffer overflow when a user visits a malicious web
page.

Successful exploitation may allow execution of arbitrary code.

3) An HTTP injection issue in XMLHttpRequest can be exploited to
inject arbitrary HTTP requests.

For more information see vulnerability #2 in:
SA25786

4) An error in WebKit within in the handling of International Domain
Name (IDN) support and Unicode fonts embedded in Safari can be
exploited to spoof a URL by registering domain names with certain
international characters that resembles other commonly used
characters.

5) An invalid type conversion when rendering frame sets may allow
execution of arbitrary code.

For more information see vulnerability #1 in:
SA25786

SOLUTION:
Update to version 1.0.1 (downloadable and installable via iTunes).

PROVIDED AND/OR DISCOVERED BY:
1) The vendor credits Lawrence Lai, Stan Switzer, and Ed Rowe of
Adobe Systems, Inc.
2) The vendor credits Charlie Miller and Jake Honoroff of Independent
Security Evaluators.
3) The vendor credits Richard Moore, Westpoint Ltd.
5) The vendor credits Rhys Kidd, Westnet.

ORIGINAL ADVISORY:
http://docs.info.apple.com/article.html?artnum=306173

OTHER REFERENCES:
SA25786:
http://secunia.com/advisories/25786/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------