Apple fixes iOS security certificate flaw that could lead to data theft

Apple has issued a security update to address a vulnerability in the way iOS devices handle data on SSL/TSL secured connections.

The company said that an attacker could exploit a flaw in the handling of X.509 security certificates to intercept or modify secured connections and leave Apple users at risk of data theft.

The iOS 4.3.5 and 4.2.10 updates fix the issue by properly validating information on X.509 certificates.

The security fix comes as Apple is readying the next version of iOS. The firm released a beta of iOS 5 on Monday which introduces the ability to wirelessly synchronise devices.

The feature will be part of a new system which allow iOS users to receive updates over the air, a key component of iOS 5.

Apple has been the subject several high-profile security research efforts recently. Earlier this month, researchers exploited a flaw in iOS to offer an automatic 'jailbreak' service.

Last week, security researcher Charlie Miller made headlines when he outlined a flaw which allows an attacker to remotely sabotage battery hardware on Apple notebooks.