A pair of European researchers used the spotlight of the CanSecWest Pwn2Own hacking contest here to break into a fully patched iPhone and hijack the entire SMS database. Using an exploit against a previously unknown vulnerability, the duo Vincenzo Iozzo and Ralf Philipp Weinmann lured the target iPhone to a rigged Web site and exfiltrated the SMS database in about 20 seconds. The exploit crashed the iPhone s browser session but Weinmann said he could have a successful attack with the browser running.
Source: https://threatpost.com/iphone-hacked-pwn2own-sms-database-stolen-032410/73737/

