Apple plugs vulnerabilities associated with jailbroken iPhones

Apple has finally eliminated a couple of vulnerabilities which were exploited to jailbreak the iPhone via the iOS, which is around one week after JailbreakMe 2.0 hit the scene. Apple says that the first of the two was a stack buffer overflow which exists in FreeType’s handling of Compact Font Format opcodes, where it can be exploited to run arbitrary code through a PDF file with malicious embedded fonts. Once there, an integer overflow in the handling of iOSurface properties is exploited to gain access to system privileges. Improved bounds checking was the solution to these problems, and we now wait on the hackers’ part to see which door they will knock on next.