Did you know that the Mailbox iPhone app had a serious security flaw?
I first heard about it when I logged on to my email this morning, and found this note from Kevin O’Brien, enterprise solution architect at CloudLock:
An Italian software engineer revealed that a significant security flaw exists in the popular Mailbox application that many users of iOS devices rely on for mail access. The report that was released demonstrated that maliciously formed emails received by end-users of the incredibly popular Mailbox app can be used to execute arbitrary code, exposing both the device and the account associated with it to a wide range of potential risks, including the complete compromise of any sensitive data stored within them.
No, I hadn’t heard that, so I went to investigate a little further. Security expert Graham Cluley posted this on his blog:
This story is a good reminder that most vulnerabilities and security flaws are a problem long before the news reaches the general public, and it may be that negative publicity that spurs the software developers to provide a fix.