Saffron

Saffron on an iPod touch 4G

Saffron (also known as JailbreakMe 3.0) is a userland untethered jailbreak from comex that utilizes JailbreakMe.com, yet again. It was the first jailbreak made available to the public for the iPad 2 running iOS 4.3.3. Saffron made its official debut on July 6, 2011. A prerelease incomplete version was leaked a few days earlier by someone who stole it from comex' server.

This jailbreak was patched on July 15, 2011 with the releases of iOS 4.2.9 (CDMA iPhone 4) and 4.3.4 (everything else).

Exploits Used

• T1 Font Integer Overflow
• IOMobileFrameBuffer Privilege Escalation Exploit
• ft_var_readpackedpoints Buffer Overflow

Compatibility

Device	Works with firmware...
	4.2.6	4.2.7	4.2.8	4.2.9	4.3	4.3.1	4.3.2	4.3.3	4.3.4
iPad	N/A				Yes	Yes	Yes	Yes	No
iPad 2	N/A				Yes	No	No	Yes	No
iPhone 3GS	N/A				Yes	Yes	Yes	Yes	No
iPhone 4 (GSM model)	N/A				Yes	Yes	Yes	Yes	No
iPhone 4 (CDMA model)	Yes	Yes	Yes	No	N/A
iPod touch 3G	N/A				Yes	No	Yes	Yes	No
iPod touch 4G	N/A				Yes	Yes	Yes	Yes	No

Links

• Saffron
• Source code on github
• Reversing Saffron
• About the security content of iOS 4.3.4