Even a simple action such as looking a JPEG image or opening a PDF document could cause serious problems, an attacker, in fact, could hijack your Apple mobile device (iPhone, iPad, and iPod).
Yes, it’s correct! A booby trapped JPEG image could compromise your vulnerable iPhone remotely.
The Apple devices are affected by a critical remote-code execution flaw, tracked as CVE-2016-4673, for this reason, the tech giant has released a new version of its mobile operating system, iOS 10.1, that addressed the issue alongside other bugs. Below the description of the flaw provided by Apple.
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution
Description: A memory corruption issue was addressed through improved memory handling.
CVE-2016-4673: Marco Grassi (@marcograss) of KeenLab (@keen_lab), Tencent
As usually happens in these cases, it is crucial a rapid patch management, users have to update their OS to fix the problems. Unfortunately, this is not true and hackers worldwide could take control of the vulnerable Apple devices in a very simple way.
The newest iOS 10.1 includes also other security updates that address 11 security flaws in the firmware for the iPhone, iPad, and iPod Touch.
The list of vulnerabilities fixed with the iOS 10.1 release includes a local code execution vulnerability, a vulnerability in contacts (CVE-2016-4686), a remote code execution flaw in WebKit (CVE-2016-4677).
Don’t waste time, update your mobile devices to the iOS 10.1 release as soon as possible.
To update your iOS device go to Settings → General → Software Update.
(Security Affairs – iOS 10.1, Iphone)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.