|
|
Similarly, VUPEN warns that these vulnerabilities "could be exploited by remote attackers to take complete control of a vulnerable device."
Symantec is reportedly investigating whether the PDF exploit can be used against the Mac OS X and Windows versions of Safari. While Adobe's Brad Arkin has asserted that Adobe Reader 9.3.3 is not vulnerable to the exploit used in the jailbreak PDF, F-Secure has stated that the files crash Adobe Reader and Foxit on Windows.
Apple tends to respond relatively quickly to security flaws in iOS. For example, an SMS exploit described by security researcher Charlie Miller in late July 2009 was fixed in an update released in early September. In contrast, the company typically takes several months to deliver patched versions of open-source software incorporated in Mac OS X.
