CVE-2016-1788

Vulnerability

The Messages application on Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 fails to properly implement a cryptographic protection mechanism. This allows remote attackers to read message attachments via vectors related to duplicate messages. The issue affects all devices running the vulnerable operating system versions. [1][2][3]

Exploitation

An attacker can exploit this vulnerability by sending specially crafted duplicate messages to a target user. No authentication is required beyond the ability to send messages to the target. The attacker does not need physical access or user interaction beyond the target receiving the messages. The exact sequence involves exploiting the duplicate message handling to bypass cryptographic protections on attachments.

Impact

Successful exploitation allows a remote attacker to read message attachments that were intended to be cryptographically protected. This leads to unauthorized disclosure of potentially sensitive information contained in attachments, compromising confidentiality. The attacker gains access to the content of attachments without proper authorization.

Mitigation

Apple addressed this vulnerability in iOS 9.3, OS X El Capitan 10.11.4, and watchOS 2.2, released on March 21, 2016. Users should update their devices to these versions or later. No workarounds are documented. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. [1][2][3]