A recent JavaScript in vulnerability Mobile Safari could lead to remote code execution on some iPhone models.

The exploit is achieved by the use of malicious website coding which would cause the vulnerable iPhone kernal to panic, making it theoretically possible to execute code on the now compromised device.

Both 1.1.2 and 1.1.3 versions have been listed as vulnerable, with earlier firmware versions believed to also be at risk.

Short of disabling JavaScript in it’s entirety through Safari (which would render most websites unusable) there’s not a whole lot you can do - apart from hoping Apple send out a patch soon. In the meantime be a little more cautious as to the websites you access.

[via Security Focus]

Post from: Talk iPhone - iPhone News Blog

iPhone 1.1.2 And 1.1.3 Vulnerable To JavaScript Exploit