Apple: PDF Exploit Patch is on the Way

August 5, 2010, By Radimir Bobev

We recently informed you of a very serious vulnerability present in iOS 4, allowing remote websites to gain complete access over your device, stealing your personal data and possibly compromising your files’ integrity. And while we have a temporary fix made by the community in the form of a jailbreak mod, it’s always good to hear that the problem is being addressed on its official end.

According to Apple, they’ve identified the problem and are already prepared to release a fix for it, which should happen shortly. Apple continued to reveal some interesting details about how the exploit works – it’s actually comprised of two parts, one which relies on arbitrary code execution in the phone’s PDF reading code, and a different one which overrides the sandbox set for programs by the OS and gains access to the entire file system.

We’re not entirely sure when exactly they’re going to release the fix though – it should be soon, considering the severity of the exploit, but on the other hand, if Apple’s past history of releasing such updates is to be of any indication, we could be in for a bit of a longer wait.

© 2008-2012 - All rights reserved | Privacy Policy