AAPL Stock: 118.34 ( + 0.53 )

Printed from

iOS 5.1 Safari vulnerability allows for spoofed URLs

updated 11:25 am EDT, Thu March 22, 2012

Dutch government issues official warning

A researcher with MajorSecurity, David Vieira-Kurz, has discovered a serious security vulnerability in the iOS 5.1 version of Safari. The problem lies with the way iOS handles the JavaScript method, used to open a new browser window. A malicious coder could use this to spoof URLs, tricking people into visiting copycat websites that might contain other threats or ask for credit card information.

The flaw has been tested on the iPhone 4, iPhone 4S, iPad 2, and third-gen iPad, and the Dutch Ministry of Security and Justice has reportedly even issued a warning. It was first discovered in iOS 5, and then replicated on March 1st. Apple was alerted on the 2nd and acknowledged the issue the next day, but has yet to put out a firmware update.

Apple now has at least two problems to address with new firmware. The other is weak Wi-Fi reception, a glitch resurrected from the first-gen iPad. Two temporary solutions include toggling Wi-Fi off and on, or simply rebooting an iPad.

by MacNN Staff



Login Here

Not a member of the MacNN forums? Register now for free.


Network Headlines

Follow us on Facebook


Most Popular


Recent Reviews

Ultimate Ears Megaboom Bluetooth Speaker

Ultimate Ears (now owned by Logitech) has found great success in the marketplace with its "Boom" series of Bluetooth speakers, a mod ...

Kinivo URBN Premium Bluetooth Headphones

We love music, and we're willing to bet that you do, too. If you're like us, you probably spend a good portion of your time wearing ...

Jamstik+ MIDI Controller

For a long time the MIDI world has been dominated by keyboard-inspired controllers. Times are changing however, and we are slowly star ...


Most Commented