Apple Patching Serious SMS Vulnerability on IPhone
Apple is trying to fix an iPhone flaw that allows an attacker to remotely install and run unsigned software code with
root access to the phone. For example, malicious code could include commands to monitor the location of the phone using GPS or turn on the phone's microphone to eavesdrop on conversations.
The attack in question exploits a weakness in the way iPhones handle text messages received via SMS (Short Message Service), said security researcher Charlie Miller, during a presentation at the SyScan conference in Singapore on Thursday. He didn't provide a detailed description of the SMS vulnerability, citing an agreement with Apple.