Tuesday, February 2, 2010
I informed Apple of the bug on October 4, 2009. Today they released a new version of iPhone OS to address the vulnerability.
The vulnerability affects the iPhone as well as the iPod touch with iPhone OS prior version 3.1.3.
The bug was easy to find, so I’m sure that I wasn’t the only person who knew about it, but I seem to be the only one who informed Apple. More surprising: Apple didn’t find such a trivial bug on its own.