Saffron

Saffron on an iPod touch 4G

Saffron (also known as JailbreakMe 3.0) is a userland untethered jailbreak from comex that utilizes JailbreakMe.com, yet again. It was the first jailbreak made available to the public for the iPad 2 running iOS 4.3.3. Saffron made its official debut on July 6, 2011. A prerelease incomplete version was leaked a few days earlier by a beta tester.

This jailbreak was patched on July 15, 2011 with the releases of iOS 4.2.9 (CDMA iPhone 4) and 4.3.4 (everything else).

Exploits Used

• T1 Font Integer Overflow
• IOMobileFrameBuffer Privilege Escalation Exploit
• ft_var_readpackedpoints Buffer Overflow

Compatibility

Device	Works with firmware...
	4.2.6	4.2.7	4.2.8	4.2.9	4.3	4.3.1	4.3.2	4.3.3	4.3.4
iPad	N/A				Yes	Yes	Yes	Yes	No
iPad 2	N/A				Yes	No	No	Yes	No
iPhone 3GS	N/A				Yes	Yes	Yes	Yes	No
iPhone 4 (GSM model)	N/A				Yes	Yes	Yes	Yes	No
iPhone 4 (CDMA model)	Yes	Yes	Yes	No	N/A				No
iPod touch 3G	N/A				Yes	No	Yes	Yes	No
iPod touch 4G	N/A				Yes	Yes	Yes	Yes	No

Links

• Saffron
• Reversing Saffron
• About the security content of iOS 4.3.4