Latest Jailbreak Not Safe?

The government may be fine with people jailbreaking their iPhones. It is not an illegal activity as we found out just a short while ago. That does not mean the risks are low for jailbreakers. The iPhone Dev team always puts out decent quality jailbreak solutions for iPhone. The latest one, which is available on jailbreakme.com, can be installed on iPhone through the web. There is just something wrong with this picture. The jailbreak software may be completely safe, but the fact that you get to install it by using Safari means there is potential for hackers to take control of iPhones using malicious web pages.
Apparently, Apple is investigating the issue and will surely introduce patches to plug these security hole. According to VUPEN Security, this is not an issue Apple can hide under a rug:
Two vulnerabilities have been identified in Apple iOS for iPhone, iPad and iPod, …. The first issue is caused by a memory corruption error when processing Compact Font Format (CFF) data within a PDF document, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page using Mobile Safari. The second vulnerability is caused by an error in the kernel, which could allow attackers to gain elevated privileges and bypass sandbox restrictions.







Subscribe by RSS