Skype vulnerability puts your iPhone at risk
Share:
Those of you who use Skype on their iPhone might want to read carefully as a security flaw in the application has just recently been exposed. In a nutshell, an attacker is able to execute malicious code on the targeted device by simply sending a chat message to the victim, and the worst thing about it is that after the attack, the victim would be most likely unaware that anything has ever happened.
What allows for the hack to be performed is the way Skype treats and stores chat messages. Apparently, if a sender sets their Skype name to a piece of code, that code will be executed on the recipient's iPhone. Sure, the iOS platform would not allow for the file system itself to be accessed without the needed permissions, but the target's address book can be accessed freely and is therefore completely exposed.
Below is a video of the hack in action demonstrating how easy it is for an attacker to steal your address book with the right tools. That being said, it would probably be a good idea to be extra careful while receiving chat messages via Skype. A solution to the vulnerability has yet to be released.
Share:
Samsung reportedly mulling a legal offensive against the new iPhone in 
HTC Rhyme goes official: landing on Verizon Sept 29th, to woo ladies with 
Related phones
7 Comments
2. Mooooo posted on 20 Sep 2011, 07:29 5 1
But wait i thought it was infallible beautiful unique and special
7. protozeloz posted on 20 Sep 2011, 18:26 0 0
Even tho ms owns skype, skype still operates aside from them, so I guess they can be called skype
5. taz89 posted on 20 Sep 2011, 15:04 0 0
i know technically this isnt apples fault but i thought that nothing can happen to the iphone...doesnt apple check apps thoroughly before they allow it be on the app store...hope no one is affected by this though
6. Paden posted on 20 Sep 2011, 16:45 0 0
"Sure, the iOS platform would not allow for the file system itself to be accessed without the needed permissions, but the target's address book can be accessed freely and is therefore completely exposed."
Address book? I'm scared. Don't call my friends!!
