{"id":142699,"date":"2022-12-09T06:57:11","date_gmt":"2022-12-09T12:57:11","guid":{"rendered":"https:\/\/blogging-techies.com\/sw\/whatsapp-har-ett-stort-nytt-sakerhetsfel-pa-android-och-ios-uppdatera-din-app\/"},"modified":"2022-12-09T06:57:11","modified_gmt":"2022-12-09T12:57:11","slug":"whatsapp-har-ett-stort-nytt-sakerhetsfel-pa-android-och-ios-uppdatera-din-app","status":"publish","type":"post","link":"https:\/\/blogging-techies.com\/sw\/whatsapp-har-ett-stort-nytt-sakerhetsfel-pa-android-och-ios-uppdatera-din-app\/","title":{"rendered":"WhatsApp har ett stort nytt s\u00e4kerhetsfel p\u00e5 Android och iOS: uppdatera din app!"},"content":{"rendered":"<div>\n<p><strong>WhatsApp \u00e4r offer f\u00f6r en stor ny s\u00e4kerhetsfel p\u00e5 Android och iOS som g\u00f6r att malware kan installeras p\u00e5 distans.  Denna s\u00e5rbarhet f\u00f6r buffert\u00f6verfl\u00f6d \u00e4r beroende av hur applikationen segmenterar metadata f\u00f6r MP4-filer.  Det skulle ocks\u00e5 vara m\u00f6jligt att exfiltrera inneh\u00e5llet i krypterade konversationer s\u00e5v\u00e4l som filer lagrade i internminnet.<\/strong><\/p>\n<figure id=\"attachment_2261200\" aria-describedby=\"caption-attachment-2261200\" style=\"width: 840px\" class=\"wp-caption aligncenter\"> Upphovsman: Phonandroid<\/figure>\n<p><strong>WhatsApp<\/strong> riktas mot en ny kritisk s\u00e5rbarhet \u2013 registrerad som CVE-2019-11931.  Detta fel \u00e4r av typ buffert\u00f6verskridande och ligger p\u00e5 det s\u00e4tt som \u00e4ldre versioner av WhatsApp analyserade \/ segmenterade grundl\u00e4ggande metadata i .MP4-videofiler.  Tack vare detta fel kunde hackare utf\u00f6ra attacker av den typen <em>f\u00f6rnekande av tj\u00e4nsten <\/em>eller k\u00f6ra kod p\u00e5 distans.<\/p>\n<p>F\u00f6r att utf\u00f6ra en attack som alla hackare beh\u00f6ver \u00e4r offrets telefonnummer.  Allt de beh\u00f6ver g\u00f6ra \u00e4r att skicka en speciellt modifierad .MP4-fil via WhatsApp f\u00f6r att utf\u00f6ra attacken.  Enligt The Hacker\u2019s News \u00e4r det s\u00e5ledes m\u00f6jligt att orsaka installation av en trojan, spionprogram eller skadlig kod.  Men ocks\u00e5 f\u00f6r att exfiltrera krypterade konversationer, personuppgifter och andra filer som lagras lokalt.<\/p>\n<p>Detta fel p\u00e5verkar fr\u00e4mst Android- och iOS-versionerna av WhatsApp.  Hacker News ger en lista och versioner av ber\u00f6rda applikationer:<\/p>\n<p>Android-versioner f\u00f6re 2.19.274 iOS-versioner f\u00f6re 2.19.100 Enterprise Client-versioner f\u00f6re 2.25.3 Windows Phone version 2.18.368 och tidigare Business f\u00f6r Android-versioner f\u00f6re 2.19.104 Business f\u00f6r iOS-versioner f\u00f6re 2.19.100<\/p>\n<p><strong>L\u00e4s ocks\u00e5: <\/strong>WhatsApp \u2013 massiva cyberattack riktade politiker<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Uppdatera_WhatsApp_ASAP\"><\/span>Uppdatera WhatsApp ASAP<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Alla dessa versioner kunde redan lappas innan felet publicerades.  F\u00f6r att undvika problem rekommenderar vi d\u00e4rf\u00f6r att du uppdaterar din WhatsApp-applikation p\u00e5 alla dina enheter via Play Store eller APK Mirror \u2013 vi erbjuder dig l\u00e4nkar nedan:<\/p>\n<p style=\"text-align: center;\"><strong>WhatsApp i Play Butik<\/strong><\/p>\n<p style=\"text-align: center;\"><strong>WhatsApp p\u00e5 APK-spegel<\/strong><\/p>\n<p>K\u00e4lla: The Hacker News<\/p>\n<p><center><br \/>\n<\/center> <\/p><\/div>\n  <div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blogging-techies.com\/sw\/whatsapp-har-ett-stort-nytt-sakerhetsfel-pa-android-och-ios-uppdatera-din-app\/#Uppdatera_WhatsApp_ASAP\" >Uppdatera WhatsApp ASAP<\/a><\/li><\/ul><\/nav><\/div>\n ","protected":false},"excerpt":{"rendered":"<p>WhatsApp \u00e4r offer f\u00f6r en stor ny s\u00e4kerhetsfel p\u00e5 Android och iOS som g\u00f6r att malware kan installeras p\u00e5 distans. Denna s\u00e5rbarhet f\u00f6r buffert\u00f6verfl\u00f6d \u00e4r beroende av hur applikationen segmenterar metadata f\u00f6r MP4-filer. Det skulle ocks\u00e5 vara m\u00f6jligt att exfiltrera inneh\u00e5llet i krypterade konversationer s\u00e5v\u00e4l som filer lagrade i internminnet. Upphovsman: Phonandroid WhatsApp riktas mot [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":142700,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[5],"tags":[46,547,1235,254,88,997,1162,26,45,24500,1531,6054,1602],"class_list":["post-142699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bloggar","tag-android","tag-app","tag-din","tag-ett","tag-har","tag-ios","tag-nytt","tag-och","tag-pa","tag-sakerhetsfel","tag-stort","tag-uppdatera","tag-whatsapp"],"_links":{"self":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/142699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/comments?post=142699"}],"version-history":[{"count":0,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/142699\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media\/142700"}],"wp:attachment":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media?parent=142699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/categories?post=142699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/tags?post=142699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}