vendor:
Arm Whois
by:
Yair RodrÃguez Aparicio
7.8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Arm Whois
Affected Version From: 3.11
Affected Version To: 3.11
Patch Exists: Yes
Related CWE: N/A
CPE: a:armcode:arm_whois:3.11
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows XP
2018
Arm Whois 3.11 – Denial of Service (PoC)
This exploit causes a denial of service in Arm Whois 3.11 by creating a text file with 700 'A' characters and pasting the content of the file into the 'IP address or domain' field of the application. This causes the application to crash.
Mitigation:
Users should update to the latest version of Arm Whois to ensure that they are not vulnerable to this exploit.
