LibTiff Exploit

The libTiff Exploit is an exploit that can be used to jailbreak iPhone OS 1.0-1.1.1. It is patched as of 1.1.2.

It was used by planetbeing's jailbreak and AppSnapp. cipher's [Archived 2018-10-09 at the Wayback Machine] version was released in 2018 due to AppSnapp being offline.

Credit

taviso^{[dead link]}, cmw (aka Niacin), Dre, MetaSploit, rezn, dinopio, drudge, kroo, pumpkin, davidc, dunham, planetbeing, NerveGas

Exploit

There was a buffer overflow in the iPhone's libtiff. This was exploited to run a small application to jailbreak and patch libtiff. This exploit was also used for PSP homebrew, which cmw also worked on. The source code of the exploit was later released by cmw on his blog [Archived 2010-09-02 at the Wayback Machine].

Sources

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3459

v t e Exploits
Exploits	0x24000 Segment Overflow ARM Exception Vector Info Leak ARM7 Go alloc8 Exploit amfid Lazy Binding Exploit amfid Text Relocation Exploit BPF_STX Kernel Write Exploit blackbird Exploit CVE-2013-0964 CVE-2021-30773 CVE-2021-30807 CVE-2021-30883 checkm8 Exploit CoreTrust Root Certificate Validation Vulnerability De Rebus Antiquis diags (iBoot command) Dual Boot Exploit Dynamic memmove() locating HFS Heap Overflow HFS Legacy Volume Name Stack Buffer Overflow iOS 5 HFS Heap Buffer Overflow IOSurface Kernel Exploit IOUSBDeviceFamily Vulnerability Incomplete Codesign Exploit iran Kernel memory write via ROP gadget libTiff Exploit limera1n Exploit MacDirtyCow Malformed CFF Vulnerability Malformed PairRequest MobileBackup Copy Exploit Overlapping Segment Attack Packet Filter Kernel Exploit posix_spawn kernel information leak Psychic Paper Pwnage Pwnage 2.0 Racoon String Format Overflow Exploit Ramdisk Hack SHA-1 Image Segment Overflow Shebang Trick Symbolic Link Vulnerability T1 Font Integer Overflow Timezone Vulnerability usb_control_msg(0x21, 2) Exploit usb_control_msg(0xA1, 1) Exploit v0rtex vm_map_copy_t corruption for arbitrary memory disclosure
Patches	/private/etc/fstab AMFI Binary Trust Cache Patch ASR Crazeles hgsp4 patch Hunnypot Kernel Patches PE_i_can_has_debugger Patch Sandbox Patch Signature Check Patch vm_map_enter Patch vm_map_protect Patch