Description
iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash the application by manipulating input. Attackers can paste a specially crafted 98-character buffer into the Domain Name field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| inettools | iNetTools for iOS | 8.20 | — |
References
- ExploitDB-47716 exploit
- Official App Store Page product
- VulnCheck Advisory: iNetTools for iOS 8.20 - 'Whois' Denial of Service third-party-advisory