CVE-2017-5209 in libplist
Summary
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/09/2017
Disclosure
01/11/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95188 | libimobiledevice libplist base64.c base64decode memory corruption | 119 | Not defined | Official fix | CVE-2017-5209 |