Bug Hunter Diary

ApplenotifiedApple confirmsthe vulnerabilityNew iPhone OSreleased by AppleRelease date of mysecurity advisory10.04.200910.15.200902.02.2010Figure 8‐3: Timeline from the time I notified Apple until I released a security advisoryNotes1. See http://en.wikipedia.org/wiki/IOS_jailbreaking.2. See http://cydia.saurik.com/.3. See “iOS Developer Library: Core Audio Overview” at http://developer.apple.com/library/ios/#documentation/MusicAudio/Conceptual/CoreAudioOverview/Introduction/Introduction.html.4. See “iOS Developer Library: Audio Toolbox Framework Reference” athttp://developer.apple.com/library/ios/#documentation/MusicAudio/Reference/CAAudioTooboxRef/_index.html.5. See http://en.wikipedia.org/wiki/Advanced_Audio_Coding.6. See http://ericasadun.com/ftp/EricaUtilities/.7. The QuickTime File Format Specification is available at http://developer.apple.com/mac/library/documentation/QuickTime/QTFF/QTFFPreface/qtffPreface.html.8. My security advisory that describes the details of the iPhone vulnerabilitycan be found at http://www.trapkit.de/advisories/TKADV2010-002.txt.148 Chapter 8