We previously reported on the Find Feature vulnerability of the Treo 650, 680, and 700p and that Palm plannned to patch the security hole.

Well, Palm has now released security updates for the Treo 650, 680 and 700p which will patch that security hole.

To remind you of the problem, here it is in a nutshell from Palm's Support site regarding the Treo 680:

When the Treo 680 smartphone password protection is enabled, the password protection can be partially circumvented by running the Find feature while on the "Make Emergency Call" screen. This would allow a malicious user to view a list of search results from the Treo 680's built-in applications such as Contacts, Calendar, Tasks, Memos and Email. The malicious user cannot access or display anything beyond the search results list. An update is now available to address this.

The update can be downloaded either via Windows/Mac or Over the Air is a 142 KB prc file.

The second bit of news is that Paul Loeffler has posted over at The Official Palm Blog that timing for the 700p maintenance release hasn't changed since Palm last posted to the blog.

"At this time, we expect the software update to be available the week of May 28th. We will post an update if the timing moves."

I'll be uploading the new security patch on my Treo 680 over the weekend. I'm sure that all the Treo 700p owners are glad to hear that the 700p maintenance release is still on schedule.

Copyright 1999-2016 TreoCentral. All rights reserved : Terms of Use : Privacy Policy

TREO and TreoCentral are trademarks or registered trademarks of palm, Inc. in the United States and other countries;
the TreoCentral mark and domain name are used under license from palm, Inc.
The views expressed on this website are solely those of the proprietor, or
contributors to the site, and do not necessarily reflect the views of palm, Inc.
Read Merciful by Casey Adolfsson