|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
AT+XLOG Vulnerability
Used as an injection vector for the current iPhone 3G and iPhone 3GS unlock payload - ultrasn0w. Currently available in all baseband versions until 04.26.08.
Credit
Exploit
There is a stack overflow in the AT+XLOG=1,"..." command, which allows unsigned code execution on the X-Gold 608.
at+xlog=1,"jjjjjjjjjjjjjjjjjjjjjjjjjjjj44445555PPPP" j's are junk R4 = 4 R5 = 5 PC = P
Implementation
The exploit is used in ultrasn0w.
