Palm, Inc. has just released a patch to fix a small flaw in the password protection software of several of its Garnet OS-based smartphones.
The flaw is:
When the Treo 680/700p/650 smartphone password protection is enabled, the password protection can be partially circumvented by running the Find feature while on the "Make Emergency Call" screen. This would allow a malicious user to view a list of search results from the Treo 680’s built-in applications such as Contacts, Calendar, Tasks, Memos and Email. The malicious user cannot access or display anything beyond the search results list.
There are versions of this for three different smartphones:
- Click here to download the Treo 680 version
- Click here to download the Treo 700p version
- Click here to download the Treo 650 version
This patch can be downloaded over-the-air to the smartphone and installed immediately, or downloaded it to a PC or Mac and installed on the Treo via HotSync.
Naturally, this is a free download.
Thanks to bigalex and AlanG for the tips.