UK Mobile Phones (uk.telecom.mobile) Mobile telephone equipment and networks.

Reply
 
LinkBack Thread Tools Display Modes
  #1   Report Post  
Old December 18th 19, 02:57 PM posted to misc.phone.mobile.iphone,comp.mobile.android,uk.telecom.mobile
external usenet poster
 
First recorded activity by MobileBanter: Nov 2019
Posts: 74
Default Bug: A single WhatsApp message can wipe out your group chats

Security researchers from Check Point found a serious security flaw in the
iOS and Android WhatsApp apps (which was updated recently to fix this bug).
<https://9to5mac.com/2019/12/17/update-whatsapp/
<https://bgr.com/2019/12/17/whatsapp-security-exploit-crash-app-fix-update/
<https://thedigitalweekly.com/2019/12/18/a-whatsapp-bug-crashes-apps-and-wipes-out-all-group-chats-and-data/
<https://www.onlyinfotech.com/2019/12/17/whatsapp-bug-crashes-app-and-completely-wipes-out-group-chats-with-a-single-message/
<https://www.justandroid.net/2019/12/17/whatsapp-bug-could-let-attackers-crash-the-app-delete-group-messages-check-point/
<https://www.idownloadblog.com/2019/12/17/whatsapp-group-chat-delete-bug/
<https://www.washingtontimes.com/news/2019/dec/17/whatsapp-updated-to-patch-bug-that-allows-attacker/
etc.

"The defect enables a bad actor to deliver a destructive group chat message
that produces a swift and complete crash of the entire application for all
members of the group chat. The crash is so severe that users are forced to
uninstall and reinstall the application, in order to gain proper use of
WhatsApp.

Furthermore, the user would be unable to return to the group chat, which
would lead to the loss of all group chat history, indefinitely. The group
chat would then not be able to be restored after the crash occurs and would
need to be deleted in order to stop the crash-loop.

Carrying out the attack would be relatively simple. An attacker would use a
web browser debugging tool to edit a message to any group chat. That
message would cause the app to crash for all members, and it would continue
to crash each time anyone tried to open it.

Because the only way to recover would be to delete the app and all its
data, then reinstall from scratch, all chat history in the group would be
lost for all members.

Check Point followed the usual responsible disclosure process, advising
WhatsApp of the details, and waiting for the company to issue an update to
fix it before going public.

That has now been done, and you can protect yourself and your groups from
this by ensuring you update WhatsApp to the latest version. "

--
Informing users of new bugs so that they can update their apps accordingly.

Reply
Thread Tools
Display Modes

Posting Rules

Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Whatsapp message thread disappeared! Maurice UK Mobile Phones 2 January 8th 17 02:09 PM
Bluetooth headset - does pairing wipe out previous pairs Jethro UK Mobile Phones 1 February 15th 10 06:51 PM
Skypephone S2: No active chats (Skype) divoch UK Mobile Phones 3 February 8th 10 01:55 PM
Nokia 6230i: selling phone - how can I wipe the phone? [email protected] UK Mobile Phones 0 March 5th 06 06:17 PM
nokia: hear no bug, see no bug, speak no bug - anyone know how to get hold of people there? Dave Mee UK Mobile Phones 7 February 10th 04 08:40 PM


All times are GMT. The time now is 06:07 AM.

Powered by vBulletin® Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
Copyright 2004-2021 Mobile Banter.
The comments are property of their posters.
 

About Us

"It's about UK mobile phones"

 

Copyright © 2017