WhatsApp is venturing towards e-commerce, CERT-In reports vulnerability

WhatsApp has launched a new shopping button on its app that will allow users to browse through a business' catalogue, the Facebook-owned messaging service said in a press release. At the same time, There are new vulnerabilities found in the WhatsApp for iOS as reported by CERT-In.

As per WhatsApp, more than 175 million people message a WhatsApp Business account every day, and more than 40 million people view a business’ catalogue each month – including more than 3 million in India.

There are vulnerabilities found in the logging library in WhatsApp and WhatsApp Business for iOS due to what is called a "use-after-free" error. CERT-In has warned users of multiple vulnerabilities in WhatsApp and WhatsApp Business for iOS which could allow a remote attacker to bypass security restrictions or execute arbitrary code on the target system.

The new feature, people will be able to see a storefront icon, right next to the business' name. This will make it easier for users to discover a catalogue and look at what goods or services are offered, as per WhatsApp .

Earlier, users had to click on the business profile to see if it offered a ready list of items. The button will also help businesses boost the visibility of their products. "This will make it easier for businesses to have their products discovered which can help increase sales," the email said.

The shopping button will replace the voice call button. Now, users will have to tap on the call button to select either a voice or video call. The new feature has been launched worldwide, the messaging service added.

With the new feature, people will be able to see a storefront icon, right next to the business' name. This will make it easier for users to discover a catalogue and look at what goods or services are offered, WhatsApp said in the emailed release. Earlier, users had to click on the business profile to see if it offered a ready list of items. The button will also help businesses boost the visibility of their products. Said in the email, it will make it easier for businesses to have their products discovered which can help increase sales.

One vulnerability was found in the Screen Lock feature in WhatsApp and WhatsApp Business for iOS due to improper authorisation of input, CERT-In said in a vulnerability note. An attacker could exploit this vulnerability by using the Siri virtual assistant to communicate even after the phone is locked, said the note last week which carried a "high" severity rating.

Another vulnerability was found in the logging library in WhatsApp and WhatsApp Business for iOS due to what is called a "use-after-free" error. A remote attacker could exploit this vulnerability by sending a specially crafted animated sticker to the target user while placing a WhatsApp video call on hold, resulting in several events occurring together in sequence, CERT-In said.

Successful exploitation of this vulnerability could lead to memory corruption, denial of service conditions or execution of remote code. To protect themselves from these vulnerabilities, users should install the latest and updated version of WhatsApp and WhatsApp Business from AppStore, CERT-In said.