Thursday, February 25, 2021

CERT-In warns users of vulnerabilities in WhatsApp for iOS

- Advertisement -

New Delhi, Nov 9 (IANS) The Indian Computer Emergency Response Team (CERT-In) has warned users of multiple vulnerabilities in WhatsApp and WhatsApp Business for iOS which could allow a remote attacker to bypass security restrictions or execute arbitrary code on the target system.

One vulnerability was found in the Screen Lock feature in WhatsApp and WhatsApp Business for iOS due to improper authorisation of input, CERT-In said in a vulnerability note.

READ ALSO:  Germany fines Facebook $2.3mn for under-reporting content complaints

An attacker could exploit this vulnerability by using the Siri virtual assistant to communicate even after the phone is locked, said the note last week which carried a “high” severity rating.

Another vulnerability was found in the logging library in WhatsApp and WhatsApp Business for iOS due to what is called a “use-after-free” error.

A remote attacker could exploit this vulnerability by sending a specially crafted animated sticker to the target user while placing a WhatsApp video call on hold, resulting in several events occurring together in sequence, CERT-In said.

READ ALSO:  India, China hold border personnel meet at Sikkim, Arunachal

Successful exploitation of this vulnerability could lead to memory corruption, denial of service conditions or execution of remote code.

To protect themselves from these vulnerabilities, users should install the latest and updated version of WhatsApp and WhatsApp Business from AppStore, CERT-In said.

Source: IANS

India Updates
India Updates is an independent news & Information website. Follow us for regular updates on News and Information.

Follow Us On

Related News

Trending Topics In India

Covid 19 India Updates

Trending News In India

Trending Showbiz

Trending Sports

Latest Trending News In India

India’s TRIPS waiver proposal on vax gets wider WTO support

New Delhi, Feb 25 (IANS) India initiated proposal seeking a temporary waiver of global intellectual property rights rules in view of the pandemic has...

Xiaomi ropes in 2 new smartphone manufacturing partners in India

New Delhi, Feb 25 (IANS) Hit by supply chain disruptions during the global pandemic, Chinese smartphone maker Xiaomi on Thursday said it has hired...

Seagate announces new cloud data storage platform

New Delhi, Feb 25 (IANS) Data storage leader Seagate Technology on Thursday introduced a new storage-as-a-service platform that will help enterprises store, activate and...

Traders across India to go on strike on Friday

New Delhi, Feb 25 (IANS) Going ahead with their protest against arbitrary regulations and changes in the Goods and Services Tax (GST) and alleged...