Recently both Comex and MuscleNerd confirmed that GeoHot has discovered a new untethered bootrom level exploit which can be used to jailbreak future devices like the iPhone 5 and iPad 2G. Interestingly, GeoHot ported Comex’s userland exploit to develop the LimeRa1n jailbreak tool instead of using his own bootrom exploit. Below is what Comex and MuscleNerd had to say:

comex: @esemede he would have implemented his own untether, but that would be wasting an exploit

MuscleNerd: (translating that retweet of @comex: geohot has an iboot-level untethered exploit but held it back to conserve exploits)

This specific vulnerability was discovered by GeoHot a while ago when both iBoot and bootrom contained the code that made them vulnerable. Similarly, Apple probably noticed by testing their own code, that iBoot and bootrom contained bad code. They fixed it in iBoot, but not in the bootrom since it is read-only. GeoHot noticed that the code was fixed in later revisions of iBoot, so that hinted that the new bootrom hardware revision will contain the fix as well. The iPad 2G and iPhone 5 will very likely be vulnerable for GeoHot’s bootrom exploit.

As usual, stay tuned for more news and info on the topic by following us on Twitter and/or subscribing to our RSS feed.

Authors: TechHead

to know more click here