Qrius
  • Business
    • Banking
    • Finance
    • Investment Guide
    • Policy
    • SMEs
    • Net Worth
    • Startup
    • Pros and Cons
  • World
    • Entertainment
    • Climate
    • Culture
    • Economy
    • History
    • Politics
    • Elections
    • Sports
      • Scrabble
    • Health
    • Lifestyle
  • Science & Technology
    • Archaeology
    • Nature
    • Space
    • Tech
    • AI
    • Fintech
    • Futuristic Technologies
    • IOT
  • India
    • Culture
    • Economy
    • History
    • Politics
    • Sports
    • Entertainment
    • Climate
    • Health
    • Lifestyle
  • Contributors
    • Digital Marketing Guest Post
    • Education Guest Post
    • Travel Guest Post
    • Fashion Guest Post
    • Fintech Guest Post
    • Health Guest Post
    • IOT Guest Post
    • Politics Guest Post
    • Sports Guest Post
    • AI Guest Post
    • Technology Guest Post
    • Literature Guest Post
  • Content Services
  • Business
    • Banking
    • Finance
    • Investment Guide
    • Policy
    • SMEs
    • Net Worth
    • Startup
    • Pros and Cons
  • World
    • Entertainment
    • Climate
    • Culture
    • Economy
    • History
    • Politics
    • Elections
    • Sports
      • Scrabble
    • Health
    • Lifestyle
  • Science & Technology
    • Archaeology
    • Nature
    • Space
    • Tech
    • AI
    • Fintech
    • Futuristic Technologies
    • IOT
  • India
    • Culture
    • Economy
    • History
    • Politics
    • Sports
    • Entertainment
    • Climate
    • Health
    • Lifestyle
  • Contributors
    • Digital Marketing Guest Post
    • Education Guest Post
    • Travel Guest Post
    • Fashion Guest Post
    • Fintech Guest Post
    • Health Guest Post
    • IOT Guest Post
    • Politics Guest Post
    • Sports Guest Post
    • AI Guest Post
    • Technology Guest Post
    • Literature Guest Post
  • Content Services
18 Nov, 19
18 Nov, 19

WhatsApp fixes bug that would have let hackers exploit devices using MP4 files

WhatsApp has fixed a vulnerability involving malicious MP4 video files that could potentially allow an attacker to remotely access messages and files stored in the app.

By Qrius

The flaw — identified as CVE-2019-11931 — made it possible for attackers to send a specially crafted MP4 file to remotely execute malicious code on the victim’s device without any intervention.

In an advisory posted on its site, Facebook said:

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS [denial of service] or RCE [remote code execution].

However, the presence of the flaw alone doesn’t mean it could be used for nefarious purposes. As is often the case, it can be an entry point for an exploit chain that links together a group of security vulnerabilities, thereby allowing a hacker to penetrate digital protections.

When we reached out for a response, a spokesperson for the company said, “WhatsApp is constantly working to improve the security of our service. We make public, reports on potential issues we have fixed consistent with industry best practices. In this instance there is no reason to believe users were impacted.”

The bug affected Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Windows Phone versions before and including 2.18.368, Business for Android versions prior to 2.19.104, and Business for iOS versions prior to 2.19.100.

While there’s no indication that the flaw was exploited, the disclosure comes weeks after WhatsApp revealed that at least two dozen academics, lawyers, Dalit activists, and journalists in India were the target of surveillance by threat operators using security firm NSO Group’s Pegasus spyware.

The social media giant has also sued the Israeli company for exploiting a now-fixed video calling flaw in WhatsApp service to surveil over 1,400 users.

In the meantime, it’s crucial that you update WhatsApp to the latest version to protect yourself from any possible attacks.


RAVIE LAKSHMANAN

This article was originally published on The Next Web


Stay updated with all the insights.
Navigate news, 1 email day.
Subscribe to Qrius

About Author

Qrius

what is qrius

Qrius reduces complexity. We explain the most important issues of our time, answering the question: "What does this mean for me?"


Featured articles

1

Before Christ

What Does BCE Mean? Difference between BCE, CE, BC and AD
2

GDP

Revealing the Top 10 GDP Countries of 2024: A Deep Dive into Global Economic Powerhouses
3

Android

The Ultimate Guide to the Best Car Racing Games for Android in 2024
4

cars

Best Family Car in India in 2024: Experience Memorable Journeys with Loved Ones
5

Extreme sports

Hidden Chess Rules: Elevate Your Game with Secret Strategies
6

adventure sports

Cristiano Ronaldo vs Lionel Messi: Why Cristiano Ronaldo Is Better
7

40 Top GK Questions: Boost Your Knowledge Quotient!
8

Why has increased productivity not led to more free time?
9

gita

Gita quotes on karma: Want to live your best life? Laws to live by…
10

Facebook

Facebook and Instagram down: What reason did Meta give?

About Qrius

  • About Us
  • Content Services
  • Contributors
  • Become a Contributor
  • Contact

Contribute

  • Digital Marketing Guest Post
  • Education Guest Post
  • Travel Guest Post
  • Fashion Guest Post
  • Fintech Guest Post
  • Health Guest Post
  • IOT Guest Post
  • Literature Guest Post
  • Politics Guest Post
  • Sports Guest Post
  • Technology Guest Post
  • AI Guest Post

Quick Links

  • World
  • Entertainment
  • Climate
  • Culture
  • Economy
  • History
  • Politics
  • Elections
  • Sports
  • Health
  • Lifestyle
  • Science & Tech
  • Archaeology
  • Nature
  • Space
  • Tech
  • AI
  • Fintech
  • Futuristic Technologies
  • IoT
  • India
  • Culture
  • Economy
  • History
  • Politics
  • Sports
  • Entertainment
  • Climate
  • Health
  • Lifestyle
2018 QRIUS. All Rights Reserved