critical9.1
CVE-2017-5209
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a…
Impact
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libimobiledevice | Libplist | through 1.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95385
- https://github.com/libimobiledevice/libplist/commit/3a55ddd3c4c11ce75a86afbefd085d8d397ff957
- https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
- http://www.securityfocus.com/bid/95385
- https://github.com/libimobiledevice/libplist/commit/3a55ddd3c4c11ce75a86afbefd085d8d397ff957
- https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html