TigerText Free Private Texting for iOS CVE-2013-0128 Local Information Disclosure Vulnerability

Bugtraq ID:	58814
Class:	Design Error
CVE:	CVE-2013-0128
Remote:	No
Local:	Yes
Published:	Apr 02 2013 12:00AM
Updated:	Apr 02 2013 12:00AM
Credit:	Pedro Paixao
Vulnerable:
Not Vulnerable:

TigerText Free Private Texting for iOS CVE-2013-0128 Local Information Disclosure Vulnerability

TigerText Free Private Texting for iOS is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

TigerText Free Private Texting for iOS CVE-2013-0128 Local Information Disclosure Vulnerability

An attacker can exploit this issue using readily available tools.

TigerText Free Private Texting for iOS CVE-2013-0128 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TigerText Free Private Texting for iOS CVE-2013-0128 Local Information Disclosure Vulnerability

References:

• TigerText Free Private Texting for iOS Homepage (Box)
  
• Vulnerability Note VU#704916 The TigerText Free Consumer Private Texting App (iO (US-CERT)