A Web site set up to help iPhone users jailbreak their devices is using a flaw in the way that the iPhone handles PDF files to escape the phone s sandbox security function. The same flaw could easily be used to install malicious software in drive-by download attacks, experts say. The iPhone doesn t have a mobile version of the Adobe Reader software and instead reads PDF files natively. Jailbreakme.com appears to use a previously unknown vulnerability in the iPhone. The site has a function that can identify what device a visitor is using.
Source: https://threatpost.com/new-safari-bug-being-used-jailbreak-iphones-080210/74284/