Security researcher Charlie Miller made clear that there was a significant vulnerability in the iPhone’s SMS system, a flaw that could “allow an attacker to remotely install and run unsigned software code with root access to the phone.”
Given the hype surrounding Apple’s iPhone, we’re actually surprised that we haven’t seen more holes to plug over the years. In fact, the last major iPhone exploit to take the world by storm happened right around this time two years ago, and now — thanks to OS X security expert Charlie Miller — we’re seeing yet another come to light. Over at the SyScan conference in Singapore, Mr. Miller disclosed a hole that would let attackers “run software code on the phone that is sent by SMS over a mobile operator’s network in order to monitor the location of the phone using GPS, turn on the phone’s microphone to eavesdrop on conversations, or make the phone join a distributed denial of service attack or a botnet.
According to Miller, the attack “exploits a weakness in the way iPhones handle text messages received via SMS (Short Message Service),” but due to a prearranged agreement with Apple to keep the details out of the press, he refused to say more. In fairness, we’re glad that he’s passing the evidence onto Apple for it to mend up the problem before it becomes something more serious.
