New WhatsApp Bug found in both Android and IoS by Sending Crafted MP4 File
By MYBRANDBOOK
A new critical vulnerability found in both Android/iOS WhatsApp version Let hackers sending a specially crafted MP4 file to WhatsApp user and trigger the stack-based buffer overflow to perform remote code execution and DoS Attack.
The specially crafted MP4 file triggers the remote code execution (RCE) and denial of service (DoS) cyberattack. “The vulnerability is classified as ‘Critical’ severity. It affected an unknown code block of the component MP4 File Handler in WhatsApp,” gbhackers reported.
Facebook said, “A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. “The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE.”
The vulnerability affected the following Versions:
· Android versions prior to 2.19.274
· iOS versions prior to 2.19.100,
· Enterprise Client versions prior to 2.25.3
· Business for Android versions prior to 2.19.104
· Business for iOS versions prior to 2.19.100
· Windows Phone versions before and including 2.18.368
The vulnerability classified as “Critical” Severity that affected an unknown code block of the component MP4 File Handler in WhatsApp. Successful exploitation of this bug leads the manipulation as part of a Message to trigger the Stack-based memory corruption vulnerability in WhatsApp Messenger.
Hackers can take advantage of this vulnerability to deploy the malware on the user’s device to steal sensitive files and also used to surveillance purposes. The RCE vulnerability allows hackers to perform the attack remotely without any sort of authentication.
This is not the first time Remote code execution vulnerability found in WhatApp in this year, we have reported another WhatsApp RCE Vulnerability in last month that allowed remote hackers to steal the files in your Android phone using malformed GIF’s. There is no technical details are available for this critical WhatsApp Vulnerability and an exploit is not available at this moment.
The news comes on the heels an Israeli software Pegasus by cyber intelligence company NSO Group that exploited its video calling system to snoop on 1,400 users globally. In India, the list included human rights activists and journalists. The issue snowballed into a political one and the Indian government denied either purchasing or planning to purchase the infamous software in question.
“We agree with the government of India’s strong statement about the need to safeguard the privacy of all Indian citizens. That is why we’ve taken this strong action to hold cyber attackers accountable and why WhatsApp is so committed to the protection of all user messages through the product we provide,” a WhatsApp spokesperson had said in a statement.
BREAKING NEWS
TECHNO TRENDS
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
E-Magazine
TECHNOTAINMENT
Netflix adds 'Moments' feature for saving, sharing scenes from
Netflix has introduced a new “Moments” feature on its mobile app, whic
Jacqueline Fernandez come together with YouTuber Mr. Beast for
Jacqueline Fernandez has partnered with American YouTuber Mr. Beast to b
MOVERS & SHAKERS
Visa elevates Rishi Chhabra as new Country Manager for India
Rishi holds a Master’s in Industrial Engineering from The Ohio State Univ
Genesys welcomes Albert Nel as Senior VP and Regional Sales Le
Genesys continues to deepen its investment in the APAC region. Earlier this
OPEN YOUR EYES
INTERVIEWS
Alpha Max offers high end solutions in the network space to en
The vision at Alpha Max is to attain quality as the trademark and create a
Delivering Critical Business Communication Solutions to Enterp
Arya Omnitalk and Syntel’s comprehensive suite of solutions and more than
HOT PICK
SonicWall Launches TZ80: A Powerful Solution for Remote Office
SonicWall announced today the launch of the TZ80, a groundbreaking securit
Gigabyte X3D Turbo: A Gaming Revolution
GIGABYTE X3D Turbo Mode is a cutting-edge feature that unifies cores distr
MAKE IN INDIA BRANDS
EXIDE INDUSTRIES LTD.
AMARA RAJA POWER SYSTEMS LTD.
LENOVO INDIA PVT. LTD.
WIPRO LTD.
EMINENT CIO'S OF INDIA
ICONS OF INDIA
Icons Of India : CP Gurnani
Former Managing Director and CEO of the well-known IT service company ...
ICONS OF INDIA : SUNIL VACHANI
Sunil Vachani is the Chairman of Dixon Technologies (India) Ltd. Under...
Icons Of India : AALOK KUMAR
Aalok Kumar is celebrated as a global leader and recipient of the Peop...
PARTNER SPEAKERS
PSU
TCIL - Telecommunications Consultants India Limited
TCIL is a government-owned engineering and consultancy company...
NIC - National Informatics Centre
NIC serves as the primary IT solutions provider for the government of ...
CSC - Common Service Centres
CSC initiative in India is a strategic cornerstone of the Digital Indi...
VIDEOS
Top 25 Brands
Global Indian industry
Indian Tech Talent Excelling The Tech World - Dheeraj Pandey, CEO, DevRev
Dheeraj Pandey, Co-founder and CEO at DevRev , has a remarkable journe...
Indian Tech Talent Excelling The Tech World - Rajiv Ramaswami, President & CEO, Nutanix Technologies
Rajiv Ramaswami, President and CEO of Nutanix, brings over 30 years of...
Indian Tech Talent Excelling The Tech World - Aman Bhutani, CEO, GoDaddy
Aman Bhutani, the self-taught techie and CEO of GoDaddy, oversees a co...
STARNITE AWARDS 2024
ITFORUM 2024
CMO of the Year
WOMEN LEADERSHIP
IMAGE GALLERY
TRENDS IN TECHNOLOGY
MORE VIDEOS
ADVERTISEMENTS
TECHNOLOGY DISRUPTION
UNICORNS REVOLUTIONISING
