iNetTools for iOS Denial-of-Service Vulnerability in Whois Feature

A denial-of-service vulnerability has been identified in iNetTools for iOS version 8.20. The issue arises in the Whois feature, where attackers can crash the application by inputting a specially crafted 98-character buffer into the Domain Name field. This manipulation triggers an application crash, disrupting the user's experience.

Impact

Exploitation of this vulnerability leads to a crash of the iNetTools application, causing a denial-of-service condition where the app becomes unresponsive or unavailable to the user.

Reproduction

To reproduce this vulnerability, first run a Python script that generates a 98-character buffer and copies it to the clipboard. Then, open the iNetTools application on an iOS device, navigate to the Whois feature, and paste the clipboard content into the Domain Name field. Starting the Whois lookup will result in the application crashing.