IOS 7: The first vulnerability found
Makradar Technologies / / December 19, 2019
New iOS with new interface dragged a couple of fresh bugs. The first was discovered a bug that allows you to gain unauthorized access to your photos even if your device is protected by a PIN code. Perform the following steps on the device, an attacker can open the application "Camera" from the Application Management window, and then - the application "Photo".
This bug easily reproduced on any device under the control iOS 7. The vulnerability was first discovered by Jose Rodriguez, who also found the vulnerability of the lock screen in iOS 6.1.3.
It is worth noting that the vulnerability does not allow access to applications that can not be opened using the Control Center, and even the screenshots in the list of running applications are empty. So that an attacker can not see that you have open in Safari or Mail. However, the "Send" menu access to photos lets you see your address book, send photos via the "Messages" or post them in one of the configured accounts in social networks. These e-mail accounts, passwords and other information that has no relationship to the images will not be available. Although the list of running applications will be available to an attacker, in fact, he can not open any of them.
Until then, until Apple fixed this vulnerability, you can protect yourself by disabling the configured access to the "Control Center" on your lock screen.
The second found vulnerability allows an attacker with physical access to your device to make calls to any phone number. To reproduce the vulnerability, you must call the emergency call screen, dial a random number and quickly press the call button to precipitate a blank screen with the Apple logo. At this point, the phone will make a call dialed number:
Apple has assured users that reported the vulnerability, it will release a corresponding correction in the near future.