Summary
Wang Junjie discovered that Libplist incorrectly handled certain files.
If a user were tricked into opening a crafted file, an attacker could possibly
use this to cause a crash or denial or service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libplist | 1.10-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libplist | 1.12-3.1ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remot…
References
-
report
https://ubuntu.com/security/CVE-2017-7982