Apple patches iPhone SMS flaw

Attackers could install malware on infected iPhones

Apple has issued an iPhone 3.0.1 software update to address a vulnerability within the smartphone's SMS software.

The flaw potentially allows an attacker to take control of a targeted phone by way of a specially crafted text message. Once the flaw has been exploited, an attacker could install malware on the device or use it to perform spam runs and further attacks.

Discovery of the flaw was credited to security researchers Charlie Miller and Collin Mulliner. The two researchers formally announced and detailed the flaw earlier this week at the Blackhat security conference.

The researchers noted that similar flaws exist in the SMS components for the Google Android and Windows Mobile platforms.

As with all other iPhone software updates, users can download and install the new fix through iTunes. The update is installed when the user plugs the handset into an authorised Mac or PC system.

Discovery of the vulnerability comes as experts and cyber criminals have been giving increased attention to mobile phones. Security researchers have been attempting to secure handsets against attack, while hackers have been exploring potential avenues of attack and uses for compromised devices.