Malformed CFF Vulnerability - Revision history

Jacob: Added CVE

2011-07-09T20:17:34Z

Added CVE

2011-07-07T02:47:34Z

It's not a "vulnerability vulnerability." ;3

2011-07-06T02:36:28Z

2011-07-06T01:27:26Z

Rephrasing.

2010-10-12T19:12:53Z

added the exploit data

2010-10-12T19:07:25Z

PDF CFF Font Stack Overflow moved to Malformed CFF Vulnerability: The old name implied that the PDF parser was involved.

2010-10-12T07:26:48Z

IOService to IOSurface

2010-10-12T03:34:46Z

Made it more like the other exploit pages.

2010-10-11T23:48:21Z

links etc.

2010-10-11T21:14:26Z

@@ Line 36: / Line 36: @@
            args += 2;
            break;
 [[Category:Exploits]]

← Older revision		Revision as of 02:47, 7 July 2011
Line 1:		Line 1:
−	The '''Malformed CFF Vulnerability''' ~~vulnerability~~ along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a vulnerability within the PDF parser, although the malformed font was placed in a PDF for exploitation.	+	The '''Malformed CFF Vulnerability''', along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a vulnerability within the PDF parser, although the malformed font was placed in a PDF for exploitation.

	== Credit ==		== Credit ==

@@ Line 1: / Line 1: @@
-This vulnerability, along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format|CFF]] opcodes. Contrary to popular belief, it is '''not''' a vulnerability within the PDF parser, although the malformed font was placed in a PDF for exploitation.
+The '''Malformed CFF Vulnerability''' vulnerability along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format|CFF]] opcodes. Contrary to popular belief, it is '''not''' a vulnerability within the PDF parser, although the malformed font was placed in a PDF for exploitation.
 == Credit ==
-[[User:Comex|comex]]
+* [[User:Comex|comex]]
  diff -u -r freetype-2.4.1/src/cff/cffgload.c freetype-2.4.1_patched/src/cff/cffgload.c
  --- freetype-2.4.1/src/cff/cffgload.c	2010-07-15 09:26:45.000000000 -0700

← Older revision		Revision as of 01:27, 6 July 2011
Line 1:		Line 1:
−	This vulnerability, along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a ~~problem~~ ~~with~~ the PDF parser, although the malformed font was placed in a PDF for exploitation.	+	This vulnerability, along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a vulnerability within the PDF parser, although the malformed font was placed in a PDF for exploitation.

	== Credit ==		== Credit ==

@@ Line 3: / Line 3: @@
 == Credit ==
 [[User:Comex|comex]]
 [[Category:Exploits]]

← Older revision	Revision as of 19:07, 12 October 2010
(No difference)

← Older revision		Revision as of 07:26, 12 October 2010
Line 1:		Line 1:
−	This vulnerability, along with the [[~~IOService~~ Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a problem with the PDF parser, although the malformed font was placed in a PDF for exploitation.	+	This vulnerability, along with the [[IOSurface Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a problem with the PDF parser, although the malformed font was placed in a PDF for exploitation.

	== Credit ==		== Credit ==

← Older revision		Revision as of 03:34, 12 October 2010
Line 1:		Line 1:
		+	This vulnerability, along with the [[IOService Kernel Exploit]], was used in [[Star]]/[[JailbreakMe]] 2.0. It is a stack overflow in the handling of [[wikipedia:PostScript fonts#Compact Font Format\|CFF]] opcodes. Contrary to popular belief, it is '''not''' a problem with the PDF parser, although the malformed font was placed in a PDF for exploitation.
−	== Exploit Status: PATCHED ==

		+	== Credit ==
−	This is the exploit used in [[User:Comex\|Comex]]'s [[JailbreakMe\|JailbreakMe 2.0]] [[Star]], the first public jailbreak for the [[K48ap\|iPad]] running 3.2 or 3.2.1 and the [[N90ap\|iPhone 4]] running 4.0 or 4.0.1.
		+	[[User:Comex\|comex]]
−
−	10 days after the jailbreak/exploit was released, Apple fixed the hole with the iOS 4.0.2 and 3.2.2 software updates.

	[[Category:Exploits]]		[[Category:Exploits]]

← Older revision		Revision as of 23:48, 11 October 2010
Line 1:		Line 1:
	== Exploit Status: PATCHED ==		== Exploit Status: PATCHED ==

		+	This is the exploit used in [[User:Comex\|Comex]]'s [[JailbreakMe\|JailbreakMe 2.0]] [[Star]], the first public jailbreak for the [[K48ap\|iPad]] running 3.2 or 3.2.1 and the [[N90ap\|iPhone 4]] running 4.0 or 4.0.1.
−
−	This is the exploit used in Comex's JailbreakMe 2.0 'star', the first public jailbreak for the iPad running 3.2 or 3.2.1 and the iPhone 4 running 4.0 or 4.0.1.

	10 days after the jailbreak/exploit was released, Apple fixed the hole with the iOS 4.0.2 and 3.2.2 software updates.		10 days after the jailbreak/exploit was released, Apple fixed the hole with the iOS 4.0.2 and 3.2.2 software updates.
		+
		+	[[Category:Exploits]]

@@ Line 1: / Line 1: @@
 == Exploit Status: PATCHED ==
-This is the exploit used in Comex's JailbreakMe 2.0 'star' (The First public Jailbreak for the iPhone 4 running 4.0 or 4.0.1)
+This is the exploit used in Comex's JailbreakMe 2.0 'star', the first public jailbreak for the iPad running 3.2 or 3.2.1 and the iPhone 4 running 4.0 or 4.0.1.
-After this jailbreak/exploit was released, 10 days later, Apple fixed this exploit in the iOS 4.0.2 software update, rendering JailbreakMe useless on 4.0.2
+days after the jailbreak/exploit was released, Apple fixed the hole with the iOS 4.0.2 and 3.2.2 software updates.