Indeed. I was wrong to assume Apple would not have yet another XML Parser somewhere else :)

In that case it would only work with side loaded Apps signed with enterprise and developer certificates.

I stand corrected.

That being said I wonder... since we have two parsers on the device and one in submission process, if a more clever variant of this bug would have worked... I guess we will never know. For sure that parser is rock solid now.