CVE-2017-6440 in libimobiledevice libplist
Summary
The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
Reservation
03/02/2017
Disclosure
03/15/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98169 | libimobiledevice libplist PLIST File bplist.c parse_data_node resource management | 399 | Not defined | Official fix | CVE-2017-6440 |