Business Insider reports today on a new bug that has apparently been discovered in iOS 7’s Mail app. The bug was first spotted by security researcher Andreas Kurtz, who posted about it on his blog. ZDNet then picked up on this initial report.
Kurtz found the bug when he restored an iPhone 4 to iOS 7.1 and iOS 7.1.1 and set up an IMAP account on the phone. After having examined some test emails resulting from setting up the IMAP account, Kurtz noted that he could access any attachments without having to pass an encryption key.
Kurtz also found the same issue on an iPhone 5s and iPad 2 that were running iOS 7.0.4. Kurtz reported the bug to Apple, which said that it was aware of the problem and was working on a fix, but gave no indication when that fix might be released to the public.
As Business Insider notes, Apple’s support page claims that its Mail app encrypts email attachments, which is clearly not the case with this bug.
Source: Business Insider
