iPhone at risk from security flaw

Security firms are warning of a vulnerability in Apple's iOS for iPhone, iPad and iPod. Symantec said that it could be exploited by remote attackers to take complete control of a vulnerable device.

Experts said that the threat, at present, only exists on paper but that Apple need to issue a fix before it becomes a reality.

Apple said that the company was aware of the report and was investigating. The problem lies in the way Apple's Mobile Safari handles Adobe Acrobat PDF documents. As the browser automatically opens PDF files, a hacker could embed malicious code into this file.

Graham Cluley, a computer security expert with Sophos, told BBC News that the exploit used the same principle as Jailbreakme - a utility that lets iPhone 4 owners run non-Apple approved applications - although it uses the exploit in a benign way.

"It uses the same tricks as you do when jailbreaking," said Mr Cluley. "We always thought that Apple's Mobile Safari would be the main vulnerability. At present, we have yet to see any of these exploits out in the wild, but it is only a matter of time," he warned.

In an ironic twist, the only way of preventing Mobile Safari from automatically opening PDF files is by jailbreaking a phone and installing an application, called PDF Loading Warner, that then asks for permission every time the browser tries to open a PDF file.

US authorities declared it was legal for users to jailbreak their phones. "I personally wouldn't want to jailbreak my phone to get the fix," said Mr Cluley, suggesting that concerned users may want to switch to an alternative web browser, such as Opera, although he stressed that they had not yet checked these systems for exploits.