CVE-2017-5209 in libplist

Resumen (Inglés)

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2017-01-09

Divulgación

2017-01-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
95188	libimobiledevice libplist base64.c base64decode desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2017-5209

Fuentes

• MITRE
• NVD
• CVE Details