Description
libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element.
References
- 35556 third-party-advisory
- 35466 vdb-entry
- netbsd-xml-dos(51311) vdb-entry
- 55285 vdb-entry
- 1022431 vdb-entry