Cyber Risks · Krebs on Security

Foxit Fix for “Jailbreak” PDF Flaw

Summary: Foxit issued an advisory for Foxit Reader version 4.1.1.0805, which fixes the crash issue caused by the iPhone/iPad jailbreak program that can be exploited to inject arbitrary code into a system and execute it there. The jailbreakme.com site leveraged two previously unknown vulnerabilities in the PDF reader functionality built into Apple's iOS4, and Adobe said the flaws were in Apple's software and did not exist in its products.

Bottom line: A drive-by jailbreak that runs from a single web visit could easily be repurposed to seed a device with unwanted software, and the same PDF flaws reached Foxit Reader's roughly 100 million users, not just jailbreakers.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Related