“Don’t try this if you don’t know what you do”


A recently discovered bug can completely block the Messages app on any iPhone and iPad updated to iOS 8, iOS iOS 9 or 10. 
Just send a well crafted vcf file to overload the CPU and freeze the device .

The bug was discovered by security researcher vincedes3:

When you click, iOS want to read the text, the text in the file is very complicated for the system and cause a CPU average: the app freeze. You close the app, want to reopen but iOS want to reload the previous message but can’t because it’s the vcf file.

The proof-of-concept

  1. Download the file here
  2. Upload it to iCloud Drive, Dropbox etc.. (just if you want to keep it)
  3. Share the file to send it via Message
  4. Send it to you’re victim
  5. Wait for the victim click on it, the Message application freeze and don’t work anymore.

[embed]https://www.youtube.com/watch?v=MrKj1rFFV_Y[/embed]

How to fix it?

Just open Safari and click on this link

References

[embed]https://vincedes3.com/crash-message-app-iphone/[/embed]
[embed]https://twitter.com/vincedes3/status/814417544807378944[/embed]
[embed]https://twitter.com/marzanoluca93/status/814856881642631170[/embed]