Wednesday, August 11, 2010

JailbreakMe: Apple Issues Emergency iPhone/iPad Security Patch

Via Graham Cluley’s Blog -

Apple has kept true to its promise, and released a security patch for users of iPhones, iPads and the iPod Touch, closing the door on a vulnerability that could have exposed them to malware and other malicious attacks.

The vulnerability first came to the public's attention after it was used by a website, JailbreakMe.com, which made it simple for iPhone and iPad users to jailbreak their devices.

As I reported earlier this month, the drive-by jailbreak exploited a vulnerability in the way that the mobile edition of Safari (the default browser used in the iOS operating system) handles PDF files - specifically its handling of fonts. Therefore, just visiting the JailbreakMe website could run code on the visitor's iPhone, iPod Touch or iPad.

Such a vulnerability, if left unpatched, leaves open opportunities for hackers to spread malicious code to Apple's mobile products.

-----------------------------------------------

Apple clearly doesn't want to see a worm spreading across the large community of standard iPhones/iPads/iPods. That would be bad for their "secure by design" image and would be very bad for their users.....but Apple also doesn't want their users to have the ability to jailbreak their devices either.

Alternative motive? Perhaps.

Especially when there hasn't been any word on the current zeroday in the latest version of Quicktime.

No comments:

Post a Comment