Few days we had reported that a Russian security researcher has discovered a string of Arabic characters that could cause any application that uses WebKit such as Safari to crash in OS X Mountain Lion and iOS 6.
Apple has reportedly fixed the bug in iOS 7 and OS X 10.9.
However, if you don’t want to wait then install GlyphPatch, a new jailbreak tweak developed by Filippo Bigarella that prevents the iOS apps from crashing with the string of Arabic characters. Bigarella has developed popular jailbreak tweaks such as Springtomize.
He has provided a detailed explanation about the patch on his blog:
GlyphPatch is a MobileSubstrate tweak which aims to patch a vulnerability affecting iOS / OS X characters rendering engines which can be exploited through a malicious sequence of characters in order to achieve a DoS attack.
The main scope of this kind of attacks is to make a resource unavailable to the user: in this particular case, using this exploit, an attacker could make one of your apps unusable.
Bigarella is also working on a patch for OS X. We’ll let you know as soon as it is released.
I was able to test the tweak in the Mail and Safari app thanks to some helpful readers who had posted the strings of Arabic characters in the comments section of the original post.
There are a number of reasons to jailbreak your iOS device, one of them is that the jailbreak community quite quick in coming up with a fix to protect users from such vulnerabilities.
Let us know how it goes in the comments.
No comments:
Post a Comment