Apple has just taken a breath after the antenna gate problem for iPhone 4 and they are now facing another threat regarding iOS security on all iDevices whether it is iPhone, iPod Touch, or iPad. The “Voluptuous Jailbreak” by comex known as JailbreakMe has completely challenged security architecture of Apple’s iOS and put a question mark against on ability of Apple’s Developers who were unaware of this atrocious hole in the security.
JailbreakMe actually jailbreaks iOS while it parses a PDF File opened using Safari. In the parsing process, the specified JailbreakMe’s PDF actually pushes a code on iOS and iDevices are jailbroken. A detailed analysis regarding the bug can be read here. What is the implication? If a website can jailbreak iOS on a device then imagine what is left behind which can’t be executed on your iDevice. Anything! Using this vulnerability a hacker can remotely take control of your iPhone, iPod Touch, and iPad. Nothing is secure anymore.
This poses a great threat for Apple’s customers and Apple can’t wait to fix this. Therefore, an iOS 4.0.2 is very likely expected to be released within days. There is iOS 4.1 Beta2 revolving around but iOS 4.1 stable is going to be released next month. So, iOS 4.0.1 update for iPhone 4 3GS 3G and iPod Touch 3G 2G will be released along with iOS 3.2.2 update for iPad.
If you have already accomplished iPhone 4 Jailbreak, 3GS, iPod Touch or iPad then this vulnerability can be fixed with a Cydia App named “PDF Loading Warner” which will warn you whenever a malicious code using this exploit is trying to be injected.
