Seems like there's a 0-day kernel-level code execution vulnerability in all iOS PDF code.

Watch your clicks iDevice owners!

Two vulnerabilities: one to run code as Safari and another to get kernel access. comex is on a roll!

Just doing this now on girlfriend's iPod touch.

My question: how are they kicking off this process from within the browser? It's pretty seamless.

It didn't even need a restart. Cydia is on the home screen, and all the previous data and user configuration is intact. I'm quite dumbfounded with how easy that was. It will be interesting to see how Apple responds.

They will respond by fixing the bug that allows it to happen. It will not be interesting.

Just read about how it works. Agreed.

Looking at the code it links to a PDF document, so it seems that someone has found a back door in the PDF implementation of iOS.

Oh, actually reading the article describes that too. Maybe i should RTFA before i hack into code XD

Looks like jailbreakers are now in the cloud, unlike Apple huh.

Well they're spending $1bn on building a massive 500,000 square foot data centre, so I'm willing to bet they're working on it.

Aaaaand it breaks both FaceTime and MMS...

Cydia has already fixed this (it'll prompt to update base package). Can also manually fix via SSH access:

chmod 755 /private/var/mobile/Library; chmod 755 /private/var/mobile/Library/Preference

Then reset network settings. Fixed!

Anyone tried it on an iPad? Not working for me...

not working for me either.

Apple's PDF code is all its own; it's not provided by Adobe. (Which explains why Preview sometimes renders differently than Acrobat does.)