Home / Vulnerability Database / Objective-C : Unsafe SMS handling
Objective-C

Objective-C : Unsafe SMS handling

Classification

OWASP Mobile Top 10 2016

Overview

This application uses SMS API. Incorrect usage of this API may violate user privacy.

The SMS protocol was primarily designed for user-to-user communication and is not well-suited for apps that want to transfer data.

Beware that SMS is neither encrypted nor strongly authenticated on either the network or the device. In particular, any SMS receiver should expect that a malicious user may have sent the SMS to your application. Don’t rely on unauthenticated SMS data to perform sensitive commands. Also, you should be aware that SMS may be subject to spoofing and/or interception on the network.

MEDIUM

DerScanner Severity Score

Do you want to fix Objective-C : Unsafe SMS handling in your application?

See also

Objective-C

Objective-C : Internal information leak

Objective-C

Objective-C : Weak hashing algorithm

Objective-C

Objective-C : Unsafe reflection