iOS 2.2 Public

The changes addressed both possible code execution from LZW-encoded images and device resets caused by memory exhaustion.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · ImageIO — CVE-2008-2327 and CVE-2008-1586

The grouped fixes covered code execution through crafted table elements, interface spoofing by overflowing frames, and calls initiated without sustained user approval.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Safari — CVE-2008-4231, CVE-2008-4232, and CVE-2008-4233

The two Mail items address background retrieval reliability and layout of messages wider than the display.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Mail enhancements

The prior cache behavior could expose sensitive form contents to someone with physical access to an unlocked device.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · WebKit — CVE-2008-3644

The networking fix ensured that the selected encryption preference was applied correctly.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Networking — CVE-2008-4227

The corrected behavior displayed only a notification that a message had arrived.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Passcode Lock — CVE-2008-4230

The feature removed the requirement to download every episode on a computer before synchronizing it to the device.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Podcast-download item

The new preference exposed control over a typing behavior that had previously operated without this user-facing switch.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Keyboard auto-correction item

The changelog repeats the reliability area addressed in 2.1 and assigns another improvement to 2.2.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Call reliability item

Apple documented potential application termination or arbitrary code execution from a malicious spreadsheet.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Office Viewer — CVE-2008-4211

The preserved changelog groups these capabilities under Maps; contemporaneous reporting noted that Street View was not present on iPod touch.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Maps enhancements and device note

This provided a direct navigation shortcut from any secondary Home-screen page.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Home-button navigation item

Previously, someone with physical access could place chargeable calls to arbitrary numbers from the emergency screen.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Passcode Lock — CVE-2008-4228

The surviving notice does not identify a codec, network, or device qualification.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Visual Voicemail item

Apple documented possible application termination or code execution when a browser or other app passed crafted input.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · CoreGraphics — CVE-2008-2321

Apple improved recognition of missing preferences to correct a race condition in settings restoration.

1. [1] About the security content of iOS 2.2 and iOS for iPod touch 2.2 · Passcode Lock — CVE-2008-4229

Apple’s consumer description is general, so this occurrence does not assign the improvement to a specific browser subsystem.

1. [1] Apple Releases iPhone 2.2 Firmware with Street View, Emoji and More · Safari improvement item