Palm Releases Treo Security Updates

Palm has released security updates for the Treo 650, 680 and 700p to patch the Treo "find vulnerability" made public earlier this year.

When the Treo password protection is enabled, the password protection can be partially circumvented by running the Find feature while on the "Make Emergency Call" screen. This would allow a malicious user to view a list of search results from the Treo's built-in applications such as Contacts, Calendar, Tasks, Memos and Email. The malicious user cannot access or display anything beyond the search results list.

The update for each device is available from Palm's support downloads page. It is a 142kb prc file that runs an installer and soft resets the device.