Risk: Medium
Multiple vulnerabilities have been found in Apple's new iPhone, which can result in the exposure of sensitive information if successfully exploited.
The majority of flaws occur in Safari and successful exploitation of them can result in unintended dialling, exposure of sensitive information or bypassing security restrictions.
Another flaw is an input validation error that occurs when handling SDP (Service Discovery Protocol) packets, which exists in the iPhone's Bluetooth server. If in Bluetooth range, an attacker can exploit this vulnerability and cause the phone to crash, execute arbitrary code or make phone calls without the user's knowledge.
To fix the vulnerabilities, users should update to version 1.1.1 through iTunes.