CVE-2014-1827 The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as de...
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ithoughtshd | = 4.19 | No fix listed |
References
- www.madirish.net exploit