CVE-2017-6439 in libplist

Resumen (Inglés)

Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2017-03-02

Divulgación

2017-03-15

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
98168	libimobiledevice libplist PLIST bplist.c parse_string_node desbordamiento de búfer	787	No está definido	Arreglo oficial	CVE-2017-6439

Fuentes

• MITRE
• NVD
• CVE Details