Treasonsms Bug Allows Hackers To Execute Malicious Code On Iphones

snoopy · Apr 24, 2012

TreasonSMS Bug Allows Hackers to Execute Malicious Code on iPhones

Researchers from the Vulnerability Lab have found high severity HTML Inject and File Include security holes in TreasonSMS, an iPhone application that allows users to send text messages from their desktop computers by turning the phone into a SMS webserver.

According to the experts, the vulnerabilities can be exploited remotely, allowing an attacker to “include malicious persistent script codes on the application-side of the iPhone.” The security hole can also be leveraged to inject webshell scripts that would give cybercriminals complete control of the affected application directory. If the device is jailbroken, things become even more complicated. On tampered iPhones an attacker could take control not only of the application folder, but also of the entire phone.

“The Bug is located in the input fields of the Message Sending & Message Output. An attacker can scan the victim on walkthrough because the IP of the webserver makes the TreasonSMS available to anybody without password,” Benjamin Kunz Mejri, the founder and CEO of Vulnerability Lab, explained.

“To exploit somebody on a walkthrough it’s only required to scan for the stable IP via WLAN and access the panel for exploitation.”
Click to expand...

More details - http:/ ews.softpedia.com ews/TreasonSMS-Bug-Allows-Hackers-to-Execute-Malicious-Code-on-iPhones-266214.shtml

Log in or Sign up

Treasonsms Bug Allows Hackers To Execute Malicious Code On Iphones

snoopy Registered Members

Share This Page

Log in or Sign up

Treasonsms Bug Allows Hackers To Execute Malicious Code On Iphones

snoopy Registered Members

Share This Page

Useful Searches