WhatsApp users urged to update app to latest version after vulnerabilities reported: SingCERT

SINGAPORE: WhatsApp users should update to the latest version of the popular messaging app after two "remote code execution" vulnerabilities were reported, the Singapore Computer Emergency Response Team (SingCERT) said in a notice on Wednesday (Sep 28).

There are currently no reports of active exploitation of these vulnerabilities, the agency said.

The first vulnerability affects the WhatsApp Video Call Handler component, allowing an attacker to exploit the vulnerability during a video call to a targeted user, and take complete control of their WhatsApp application, SingCERT said.

This vulnerability affects WhatsApp and WhatsApp Business for iOS and Android prior to version 2.22.16.12.

The second vulnerability affects the WhatsApp Video File Handler component, allowing an attacker to exploit the vulnerability by sending a specially crafted video file to a targeted user, convincing the user to play it, SingCERT said.

This vulnerability affects WhatsApp for Android prior to version 2.22.16.2, and WhatsApp for iOS version 2.22.15.9.

"Users are also encouraged to enable automatic updates (if available) in iOS App Store and Android Play Store to ensure their applications are updated promptly."

On Sep 13, SingCERT urged Apple users to patch products like Safari, iOS and macOS to the latest version after hackers actively exploited a bug that could allow maliciously written programs to execute arbitrary code.

Source CNA

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

Exodus814
2022-09-29
Exodus814
Telegram the best
KK2021
2022-09-29
KK2021
ok
junqi99
2022-09-29
junqi99
[Smile]
fabio
2022-09-29
fabio
Wah
大赢家 BIG WINNER
2022-09-29
大赢家 BIG WINNER
thanks
Eleewin
2022-09-29
Eleewin
Hi

Leave a comment

17

16

{"i18n":{"language":"en_US"},"detailType":1,"isChannel":false,"data":{"magic":2,"id":9918624274,"tweetId":"9918624274","gmtCreate":1664382581098,"gmtModify":1676537444713,"author":{"id":4095487021532720,"idStr":"4095487021532720","authorId":4095487021532720,"authorIdStr":"4095487021532720","name":"bunnygal","avatar":"https://static.tigerbbs.com/4ead0d62faaad0703dd210261a86816a","vip":1,"userType":1,"introduction":"","boolIsFan":false,"boolIsHead":false,"crmLevel":6,"crmLevelSwitch":0,"individualDisplayBadges":[],"fanSize":32,"starInvestorFlag":false},"themes":[],"images":[],"coverImages":[],"title":"WhatsApp users urged to update app to latest version after vulnerabilities reported: SingCERT","html":"<html><head></head><body><p>SINGAPORE: WhatsApp users should update to the latest version of the popular messaging app after two \"remote code execution\" vulnerabilities were reported, the Singapore Computer Emergency Response Team (SingCERT) said in a notice on Wednesday (Sep 28).</p><p>There are currently no reports of active exploitation of these vulnerabilities, the agency said.</p><p>The first vulnerability affects the WhatsApp Video Call Handler component, allowing an attacker to exploit the vulnerability during a video call to a targeted user, and take complete control of their WhatsApp application, SingCERT said.</p><p>This vulnerability affects&nbsp;WhatsApp and WhatsApp Business for iOS and Android prior to version&nbsp;2.22.16.12.</p><p>The second vulnerability&nbsp;affects the WhatsApp Video File Handler component, allowing an attacker to exploit the vulnerability by sending a specially crafted video file to a targeted user, convincing the user to play it, SingCERT said.</p><p>This vulnerability affects&nbsp;WhatsApp for Android prior to version 2.22.16.2, and&nbsp;WhatsApp for iOS version 2.22.15.9.</p><p>\"Users are also encouraged to enable automatic updates (if available) in iOS App Store and Android Play Store to ensure their applications are updated promptly.\"</p><p>On Sep 13, SingCERT urged Apple users to patch products like Safari, iOS and macOS to the latest version after hackers actively exploited a bug that could allow maliciously written programs to execute arbitrary code.</p><p>Source CNA</p></body></html>","htmlText":"<html><head></head><body><p>SINGAPORE: WhatsApp users should update to the latest version of the popular messaging app after two \"remote code execution\" vulnerabilities were reported, the Singapore Computer Emergency Response Team (SingCERT) said in a notice on Wednesday (Sep 28).</p><p>There are currently no reports of active exploitation of these vulnerabilities, the agency said.</p><p>The first vulnerability affects the WhatsApp Video Call Handler component, allowing an attacker to exploit the vulnerability during a video call to a targeted user, and take complete control of their WhatsApp application, SingCERT said.</p><p>This vulnerability affects&nbsp;WhatsApp and WhatsApp Business for iOS and Android prior to version&nbsp;2.22.16.12.</p><p>The second vulnerability&nbsp;affects the WhatsApp Video File Handler component, allowing an attacker to exploit the vulnerability by sending a specially crafted video file to a targeted user, convincing the user to play it, SingCERT said.</p><p>This vulnerability affects&nbsp;WhatsApp for Android prior to version 2.22.16.2, and&nbsp;WhatsApp for iOS version 2.22.15.9.</p><p>\"Users are also encouraged to enable automatic updates (if available) in iOS App Store and Android Play Store to ensure their applications are updated promptly.\"</p><p>On Sep 13, SingCERT urged Apple users to patch products like Safari, iOS and macOS to the latest version after hackers actively exploited a bug that could allow maliciously written programs to execute arbitrary code.</p><p>Source CNA</p></body></html>","text":"SINGAPORE: WhatsApp users should update to the latest version of the popular messaging app after two \"remote code execution\" vulnerabilities were reported, the Singapore Computer Emergency Response Team (SingCERT) said in a notice on Wednesday (Sep 28). There are currently no reports of active exploitation of these vulnerabilities, the agency said. The first vulnerability affects the WhatsApp Video Call Handler component, allowing an attacker to exploit the vulnerability during a video call to a targeted user, and take complete control of their WhatsApp application, SingCERT said. This vulnerability affects WhatsApp and WhatsApp Business for iOS and Android prior to version 2.22.16.12. The second vulnerability affects the WhatsApp Video File Handler component, allowing an attacker to exploit the vulnerability by sending a specially crafted video file to a targeted user, convincing the user to play it, SingCERT said. This vulnerability affects WhatsApp for Android prior to version 2.22.16.2, and WhatsApp for iOS version 2.22.15.9. \"Users are also encouraged to enable automatic updates (if available) in iOS App Store and Android Play Store to ensure their applications are updated promptly.\" On Sep 13, SingCERT urged Apple users to patch products like Safari, iOS and macOS to the latest version after hackers actively exploited a bug that could allow maliciously written programs to execute arbitrary code. Source CNA","highlighted":1,"essential":1,"paper":2,"likeSize":16,"commentSize":17,"repostSize":0,"favoriteSize":0,"link":"https://ttm.financial/post/9918624274","repostId":0,"isVote":1,"tweetType":1,"viewCount":428,"commentLimit":10,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"symbols":[],"verified":2,"subType":0,"readableState":1,"langContent":"EN","currentLanguage":"EN","warmUpFlag":false,"orderFlag":false,"shareable":true,"causeOfNotShareable":"","featuresForAnalytics":[],"commentAndTweetFlag":false,"andRepostAutoSelectedFlag":false,"upFlag":false,"length":1221,"xxTargetLangEnum":"ORIG"},"commentList":[{"id":104132789,"commentId":"104132789","gmtCreate":1664386210905,"gmtModify":1664386214676,"authorId":3569525103821527,"author":{"id":3569525103821527,"idStr":"3569525103821527","authorId":3569525103821527,"name":"Exodus814","avatar":"https://static.tigerbbs.com/c0f0795fb7dca297a2d6554776a11f5f","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"<span class=\"s1\">Telegram the best</span>","text":"<span class=\"s1\">Telegram the best</span>","html":"<span class=\"s1\">Telegram the best</span>","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"valid","coins":0,"score":0},{"id":104132791,"commentId":"104132791","gmtCreate":1664386218212,"gmtModify":1664386221618,"authorId":3575143606799200,"author":{"id":3575143606799200,"idStr":"3575143606799200","authorId":3575143606799200,"name":"KK2021","avatar":"https://static.tigerbbs.com/e57decb2950e37ceb12176c97c9be2c4","vip":1,"currentWearingBadge":{"badgeId":"972123088c9646f7b6091ae0662215be-3","templateUuid":"972123088c9646f7b6091ae0662215be","name":"Legendary Trader","description":"Total number of securities or futures transactions reached 300","bigImgUrl":"https://static.tigerbbs.com/656db16598a0b8f21429e10d6c1cb033","smallImgUrl":"https://static.tigerbbs.com/03f10910d4dd9234f9b5702a3342193a","grayImgUrl":"https://static.tigerbbs.com/0c767e35268feb729d50d3fa9a386c5a","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2021.12.21","exceedPercentage":"93.86%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1100},"hat":"https://static.tigerbbs.com/4c5ceab71416b120bab4604c0754b52a","crmLevel":9,"crmLevelSwitch":1,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"<u>ok</u>","text":"<u>ok</u>","html":"<u>ok</u>","likeSize":1,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0},{"id":104132790,"commentId":"104132790","gmtCreate":1664386214240,"gmtModify":1664386217611,"authorId":4103117810762840,"author":{"id":4103117810762840,"idStr":"4103117810762840","authorId":4103117810762840,"name":"junqi99","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"<span class=\"s1\">[Smile]</span>","text":"<span class=\"s1\">[Smile]</span>","html":"<span class=\"s1\">[Smile]</span>","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0},{"id":104132785,"commentId":"104132785","gmtCreate":1664386186365,"gmtModify":1664386189849,"authorId":3555261138218608,"author":{"id":3555261138218608,"idStr":"3555261138218608","authorId":3555261138218608,"name":"fabio","avatar":"https://static.tigerbbs.com/8da22244b65eeb511fac3b0633934760","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"Wah","text":"Wah","html":"Wah","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0},{"id":104132784,"commentId":"104132784","gmtCreate":1664386185444,"gmtModify":1664386188563,"authorId":4091244300202810,"author":{"id":4091244300202810,"idStr":"4091244300202810","authorId":4091244300202810,"name":"大赢家 BIG WINNER","avatar":"https://static.tigerbbs.com/59a385c79fcea7906bfceb7d654366cf","vip":1,"currentWearingBadge":{"badgeId":"1026c425416b44e0aac28c11a0848493-1","templateUuid":"1026c425416b44e0aac28c11a0848493","name":"Debut Tiger","description":"Join the tiger community for 500 days","bigImgUrl":"https://static.tigerbbs.com/0e4d0ca1da0456dc7894c946d44bf9ab","smallImgUrl":"https://static.tigerbbs.com/0f2f65e8ce4cfaae8db2bea9b127f58b","grayImgUrl":"https://static.tigerbbs.com/c5948a31b6edf154422335b265235809","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2022.12.19","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1001},"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"thanks","text":"thanks","html":"thanks","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0},{"id":104132780,"commentId":"104132780","gmtCreate":1664386160595,"gmtModify":1664386163848,"authorId":3582976108435272,"author":{"id":3582976108435272,"idStr":"3582976108435272","authorId":3582976108435272,"name":"Eleewin","avatar":"https://community-static.tradeup.com/news/771faff9112e3466b8851902ee94f672","vip":1,"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":9918624274,"objectIdStr":"9918624274","type":1,"supId":0,"supIdStr":"0","prevId":0,"prevIdStr":"0","content":"<span class=\"s1\">Hi</span>","text":"<span class=\"s1\">Hi</span>","html":"<span class=\"s1\">Hi</span>","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0}],"isCommentEnd":false,"isTiger":false,"isWeiXinMini":false,"url":"/m/post/9918624274"}