 Saffron on an iPod touch (4th generation) | |
| Developer(s) | comex |
|---|---|
| Initial release | 6 June 2011 |
| Repository | github |
| Written in | |
| Operating system | iOS |
| Type | Jailbreak |
| Website | www |
Saffron (also known as JailbreakMe 3.0) is a userland untethered jailbreak from comex that utilizes JailbreakMe.com, yet again. It was the first jailbreak made available to the public for the iPad 2 running iOS 4.3.3. In June 2011, comex began to put up teasers on JailbreakMe. On 2 July 2011, someone found a prerelease version of "Saffron," the third incarnation of JailbreakMe, through Google dorking on comex's website. Subsequently, this version leaked publicly. On 6 July 2011, "Saffron" made its official debut on JailbreakMe.
This jailbreak was patched on 15 July 2011 with the releases of iOS 4.2.9 (iPhone 4 CDMA model) and 4.3.4 (all other devices).
Exploits Used
Compatibility
| Device | Works with firmware... | |||||||
|---|---|---|---|---|---|---|---|---|
| 4.2.6 | 4.2.7 | 4.2.8 | 4.3 | 4.3.1 | 4.3.2 | 4.3.3 | ||
| iPad | — | Yes | ||||||
| iPad 2 | No | Yes | ||||||
| iPhone 3GS | Yes | |||||||
| iPhone 4 (iPhone3,1) | ||||||||
| iPhone 4 (iPhone3,3) | Yes | — | ||||||
| iPod touch (3rd generation) | — | Yes | No | Yes | ||||
| iPod touch (4th generation) | Yes | |||||||
Problems
Domain owner problem
On 7 October 2011, MuscleNerd announced that the domain was sold and that the new owner was unknown, creating a danger of the site hosting malware.[1][2] The new owner sold it the next day to saurik, who hosted the site anyway, resolving the concern.[3]
Certificate problem
Starting early December 2015, the domain started to display a blank homepage. In addition, JailbreakMe began to redirect traffic to HTTPS; however, the TLS certificate it was using was invalid. Turns out comex moved the files to his personal domain.
External Links
- Saffron (semi-broken)
- Source Code
- Analysis of the Exploit [Archived 2011-07-22 at the Wayback Machine]
- Apple KB HT4802 (iOS 4.2.9/4.3.4 Security Fixes)
