TrippleTech.blogspot.com

U.S. media reports that Apple already has a "fix" solution to the security problem completed and will update this one coming distribute. When you want to be accurate, would not say Apple. Let us hope that he comes soon, because without doubt it is the biggest threat to iPhone owners, since the device does it on the market right now.  It is unclear whether Apple closes both gaps, or only one.On Wednesday, the Federal Office for Information Technology had even security against possible attacks in the warning .

The gaps is it a bug in the handling of PDF files embedded in "Compact Font Format" data (CFF) in the PDF viewer and a gap in the kernel. The CFF gap can be exploited to inject code using crafted PDF documents in an iPhone and run it. It emerged in this context, the exploit succeeds Jailbreakme also appears to trick the DEP on the iPhone.  The kernel uses the exploit gap then to break out of the sandbox and run with higher privileges on the iPhone and so ultimately unlock the device.

So far, only uses the Jailbreakme exploit the gaps to open when calling the project site via Safari on the iPhone-specific versions tailored to PDF documents.  Basically, there are other apps that can be used to open PDFs. Furthermore, additional pages may soon appear in the network who use the exploit - but then to infect the machine with malware instead of it just to unlock.

Yet security specialists are hard to do but to publish more information on the gaps, which is in part because the exploit is equipped with protection functions that are difficult to debug and analyze.Therefore there are no exploits with payload. Users should be careful what links you follow and which sites they open with Safari.Security service provider Websense suggests , alternative browsers such as Atomic Web browser or use the iCabMobile. Both have filters that prevent identifying the PDFs can be opened without confirmation.