March 18, 2008 10:14 AM PDT

Web code locks up iPhones and iPod Touch

A new exploit will either lock up your iPhone or iPod Touch or crash your Safari browser on your PC or Mac OS desktop if you simply visit a maliciously coded Web site. Unlike an earlier exploit that required users to click to become infected, the new code published by iPhoneWorld requires no user interaction.

So far, Apple has had no comment.

The code was first reported in January and exhausts the memory in Safari, which in turn will cause your iPhone or iPod Touch to freeze, or your desktop Safari to crash. "Given the nature of this issue," said the BugTraq newsgroup vulnerability report, "remote code execution may also be possible, but this has not been confirmed."

There is no patch available from Apple. The recommended workaround is to disable Javascript within Safari. To do so:

    1. Under Edit, click Preferences.
    2. Click the Security icon.
    3. Uncheck Enable JavaScript.
    4. Close and restart Safari.
Originally posted at Defense in Depth
Recent posts from Crave
This week in Crave-land
Wristband packs GPS system, music player
Super XX Man, 'Medication': Free MP3 of the Day
Review: 2009 Mercedes-Benz SL550
ZvBox: Not the ultimate PC-to-TV box
Powered by Jive Software
advertisement

About Crave

The name says it all. Crave is our blog about gorgeous gadgets and other crushworthy stuff. If you would like to contact Crave with a tip or comment, please write to: crave@cnet.com

Add this feed to your online news reader

Crave topics

advertisement

Inside CNET News

Scroll Left Scroll Right