Apple has released the iOS 7.0.2 update for users running iOS 7 or 7.0.1 on their iPhone, iPad and iPod touch devices.
The update fixes the lock screen vulnerabilities that was discovered a few days back, after the public release of iOS 7.
The iOS 7.0.2 update is a 21MB download on iPhone 5 and can be downloaded over the air on devices or via iTunes on computers. Apple mentions that the iOS 7.0.2 software update fixes bugs that could allow someone to bypass the lock screen passcode and reintroduces a Greek keyboard option for passcode entry.
Detailing the update's security content, Apple
mentions that the update fixes a passcode lock vulnerability on iPhone 4 or later which allowed a person with physical access to the device to make calls to any number. "A NULL dereference existed in the lock screen which would cause it to restart if the emergency call button was tapped repeatedly. While the lock screen was restarting, the call dialler could not get the lock screen state and assumed the device was unlocked, and so allowed non-emergency numbers to be dialed. This issue was addressed by avoiding the NULL dereference," said Apple.
The iOS 7 vulnerability
allowed anyone to dial a number through a passcode locked iPhone's Emergency number dialler screen after a few attempts.
The other iOS 7 vulnerability allowed a person with physical access to the device to see recently used apps, see, edit, and share photos. "The list of apps you opened could be accessed during some transitions while the device was locked, and the Camera app could be opened while the device was locked," informed Apple.
The lock screen security hole allowed users to
bypass the passcode on any iOS device and gain access to the Photos app and subsequently to the user's email and social networking accounts via the control center.
iOS 7 was released publicly on September 18. In Apple's words it is "the most significant iOS update since the original iPhone." The OS bring a completely overhauled user interface design, and adds many missing features that were being offered by rival mobile platforms.