![[Playstation 3] Overflow 4.85 v7 Cobra noBT CEX edition Released](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiP4Ek9BpFI-8Kef_pdUlcMmqoL_bioasj2q0t8ApKa7raxJv1qPdrJ3Svb0ysokOCRjOBRICwGFgT8bZnMuFze7u-hf2nH8W-v1lJjnlvJ_BAvbDve55stue6OXiWP7tieMC-YUgmjGVP/w280/cobracfw.png)
iOS 4.3.1 does not fix the pwn2own bug. It's weird they fixed it in the next os x update after the contest, but not the next iPhone update.
More time for the bad guys to get their bindiff->iPhone exploit workflow going.
The attack simply required that the target iPhone surfs to a rigged web site. On first attempt at the drive-by exploit, the iPhone browser crashed but once it was relaunched, Miller was able to hijack the entire address book.
It's unclear why Apple didn't fix the widely publicized exploit.