Upgrade To iOS 8, Security Flaws Makes iOS 7 Risky

Upgrade To iOS 8, Security Flaws Makes iOS 7 Risky

Apple users those whore using the iOS 7, are in a risky position as it contains serious security flaws. Apples latest iOS8 is to fix some security issues if you upgraded.

One of the bigger threats is a vulnerabilityCVE-2014-4377 in how iOS processes PDF files as images. An attacker who exploits the flaw could use a malicious Web page viewed by the user in Safari to run code on the victim’s device, according to adescription of the problem posted this week by Argentinian security consultancy Binamuse.

A proof-of-concept attack is “a complete 100% reliable and portable exploit for MobileSafari on IOS7.1.x,” Felipe Andres Manzano, principal consultant at Binamuse, stated in the company’s analysis.

The above said issue is confirmed by Apple, and it says it is fixed in iOS 8.0 released on September 17. They also released a patch after a week, iOS 8.0.1 due to widespread Touch ID and cellular issues caused by the software update. iOS 8.0.2, released the day after 8.0.1, resolved those problems.

For the many users of older Apple iPhones, such as the iPhone 4, which cannot upgrade to iOS 8, a patch is unlikely to be forthcoming, security experts said. While the exploit allows an attacker to run code on the compromised device, they may only be able to run legitimate applications, a restriction imposed on all but jailbroken phones. “So it might be that this vulnerability alone, may not be enough to infect the phone with malware, unless you combine it with other exploits,” Hirvonen said.

Manzano agreed, adding “this exploit needs a companion information-leakage vulnerability to bypass ASLR, DEP and code-signing iOS exploit mitigations.” In the iOS 8 upgrade, Apple fixed just such an issue, CVE-2014-4384, which allows an attacker to install unverified apps.

So the iPhone and iPad users those whore still running iOS 7, beware of the flaws and upgrade to new iOS8 as soon as possible.

Tags:

Haridas Gowra Avatar

Help Us Grow

If you like this post, please share it with your friends.

You are free to copy and redistribute this article in any medium or format, as long as you keep the links in the article or provide a link back to this page.

Subscribe to Newsletter




Privacy Settings

Privacy & Cookie Overview

Our website uses cookies to provide you with the best user experience possible. These cookies are stored in your browser and perform essential functions such as recognizing you when you return to our website, as well as helping us to understand which sections of the website you find most useful and engaging.

To learn more, you can read our Privacy & Cookie Policy or reach out through our Contact form.

Strictly Necessary Cookies

Strictly Necessary Cookies must always be enabled to ensure the proper functioning of this website and to allow us to provide you with excellent service. These cookies are also essential for saving your cookie preferences.

Google Adsense

We use Google AdSense to keep this site free by displaying relevant ads. AdSense requires essential cookies that cannot be disabled, but you can manage other cookies. We respect your privacy and provide options to control non-essential cookies.

For more details on how Google handles your data, visit Google's Data Usage Policy. Please review our Privacy Policy for more information on how we protect your data.

AddToAny

We use AddToAny for social sharing. It doesnโ€™t store cookies, ensuring a privacy-friendly experience. AddToAny complies with GDPR and CCPA by default.

For more, see their Privacy Policy.

OneSignal

We use OneSignal to send notifications to users who opt in. OneSignal complies with GDPR and is certified under the EU-US and Swiss-US Privacy Shield frameworks.

For more, see their Privacy Policy.

3rd Party Cookies

This website utilizes third-party cookies, which can enhance your experience and support our ongoing efforts to improve our services.

Google Analytics

We use Google Analytics to collect anonymous data, such as visitor numbers and popular pages, to improve user experience and site performance. Keeping this cookie enabled helps us refine the site based on visitor activity.

For more information, see Googleโ€™s Privacy Policy.

Discover more from Prime Inspiration

Subscribe now to keep reading and get access to the full archive.

Continue reading