Researchers demonstrated how they could hack a non-jailbroken iPhone at Pwn2Own contest at the recent CanSecWest security show in Vancouver, Canada.Lozo and Weinmann wrote an exploit in 2 weeks designed to steal the SMS database on an iPhone.
In order to complete the attack, the iPhone must visit a website hosting the exploit codes. Weinmann said that the payload would execute and upload the local SMS database of the phone to the server that they control.
An report from cnet news has more details on this.
Link: iPhone, Safari, IE 8, Firefox hacked in CanSecWest cont