WhatsApp Security Vulnerability

http://www.telegraph.co.uk/technology/internet-security/11850817/WhatsApp-security-breach-lets-hackers-target-web-app-users.html

by rsobers • 11 years ago

34 5 11 years ago

telegraph.co.uk

mercora2• 11 years ago

I wonder why this should only be exploitable on the WhatsApp web application. If it is possible to trick browsers into launching arbitrary applications by using vcards, this should affect many web application using vcards and the the security issue would have been in the browser side of things. What am i missing?

mercora2• 11 years ago

Ok the linked[0] blog post from Check Point has more details into whats actually happening.

[0] http://blog.checkpoint.com/2015/09/08/whatsapp-maliciouscard...

steve19• 11 years ago

It simply allows you to send arbitrary files. No different to sending a link to a virus over email or putting a link on a Web page.

Stupid/normal users would then try run the downloaded file.

NullCharacter• 11 years ago

It's a little more guileful than that, and it definitely is a flaw with WhatsApp not validating their file types/formats.

WhatsApp Security Vulnerability

Related Stories