Web-based jailbreak relies on unpatched iOS PDF flaw

jmke · 3rd August 2010, 22:23

A new Web-based jailbreak was released recently for iPhones and iPads running the latest versions of iOS. Users merely need to visit jailbreakme.com from an iPhone or iPad to automatically jailbreak the device, allowing them to install apps and hacks that have not been approved by Apple. However, the process relies on a vulnerability in Mobile Safari that could be likewise exploited by more nefarious hackers to access all the data on your device.

http://arstechnica.com/apple/news/20...campaig n=rss

Stefan Mileschin · 4th August 2010, 07:32

Now because this news is spread all over the Internet, Apple will know and patch the 4.1 version

. Jailbreak won't be available for months...again...

4th August 2010, 09:23

Quote:

Originally Posted by Stefan Mileschin

Now because this news is spread all over the Internet, Apple will know and patch the 4.1 version

. Jailbreak won't be available for months...again...

The JailbreakMe website mentions not the upgrade past 4.01, they mention it for a reason

It also would not have taken Apple much longer to find out that jailbreakme uses a pdf exploit to jailbreak the new iPhone. It might not surprise me if Adobe did this on purpose, Apple has been restricting them too much and this is the perfect way to allow the installation of Flash support on the iPhone

Stefan Mileschin · 4th August 2010, 09:30

Hope there will be exploits like this in the future too, so we won't have to wait ages for a jailbreak to come out.

Seems iOS 4.1 beta 2 already has this fixed and yesterday was already posted beta 3 on the website for download for the devs.

jmke · 4th August 2010, 10:14

Quote:

Originally Posted by Stefan Mileschin

Now because this news is spread all over the Internet, Apple will know and patch the 4.1 version

. Jailbreak won't be available for months...again...

you don't like that Apple fixes a huge security flaw which allows a random website to get root access on your phone to change system setting, for all you know, next visit to a site will install spyware and malware on your iphone through this pdf flaw

3rd August 2010, 22:23	#1
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	Web-based jailbreak relies on unpatched iOS PDF flaw A new Web-based jailbreak was released recently for iPhones and iPads running the latest versions of iOS. Users merely need to visit jailbreakme.com from an iPhone or iPad to automatically jailbreak the device, allowing them to install apps and hacks that have not been approved by Apple. However, the process relies on a vulnerability in Mobile Safari that could be likewise exploited by more nefarious hackers to access all the data on your device. http://arstechnica.com/apple/news/20...campaig n=rss __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Real-time Web Based Power Charting	jmke	WebNews	0	22nd January 2009 16:20
What Web based E-mail service do you use?	jmke	WebNews	9	30th April 2006 21:49
Unpatched Firefox flaw may expose users	Sidney	WebNews	0	9th September 2005 16:34
Beginner’s guide to web site hosting	Sidney	WebNews	0	12th May 2005 17:35

4th August 2010, 07:32	#2
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,440	Now because this news is spread all over the Internet, Apple will know and patch the 4.1 version . Jailbreak won't be available for months...again...

4th August 2010, 09:30	#4
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,440	Hope there will be exploits like this in the future too, so we won't have to wait ages for a jailbreak to come out. Seems iOS 4.1 beta 2 already has this fixed and yesterday was already posted beta 3 on the website for download for the devs.