CVE-2017-8782

CVE-2017-8782 affects libming 0.4.8, where the readString function (util/read.c and util/old/read.c) can mishandle a large input due to an integer overflow, leading to memory allocation errors and remote denial of service (DoS) via SWF processing (listswf, listaction, etc.). Several connected adv...

openSUSE Security Update : libplist (openSUSE-2017-627)

This update for libplist fixes the following issues : - CVE-2017-5209: The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data bsc1019531. - CVE-2017-5545:...

SUSE SLED12 / SLES12 Security Update : libplist (SUSE-SU-2017:1379-1)

This update for libplist fixes the following issues : - CVE-2017-5209: The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data bsc1019531. - CVE-2017-5545:...

SUSE-SU-2017:1379-1 Security update for libplist

This update for libplist fixes the following issues: - CVE-2017-5209: The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data bsc1019531. - CVE-2017-5545: T...

SUSE SLED12 / SLES12 Security Update : libplist (SUSE-SU-2017:1368-1)

This update for libplist fixes the following security issues : - CVE-2017-5545: The main function in plistutil.c in libimobiledevice libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via Apple Property List data that is to...

SUSE-SU-2017:1368-1 Security update for libplist

This update for libplist fixes the following security issues: - CVE-2017-5545: The main function in plistutil.c in libimobiledevice libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via Apple Property List data that is too...

PT-2017-4258 · Gnome +5 · Libcroco +5

Name of the Vulnerable Software and Affected Versions: libcroco version 0.6.12 Description: The issue is related to the cr tknzr parse comment function in the cr-tknzr.c component of the libcroco library, which can cause a denial of service due to a memory allocation error when processing a craft...

libplist 'parse_string_node()' function local denial of service vulnerability

libplist is a small portable C library that handles Apple Property List files in binary or XML. A denial of service vulnerability exists in libimobiledevice libplist version 1.12 in the parsestringnode function in bplist.c, which can cause a denial of service memory allocation error by a local us...

CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

DEBIAN-CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

Design/Logic Flaw

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6436

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6436

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

Design/Logic Flaw

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6436

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6436

The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6440

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

CVE-2017-6436

CVE-2017-6436 affects libplist (libimobiledevice/libplist 1.12). The vulnerability resides in the parse_string_node function in bplist.c and can be triggered by a crafted plist file to cause a denial of service via a memory allocation error, via local access. Impact is DoS on affected systems; ex...

CVE-2017-6440

The CVE-2017-6440 entry concerns libimobiledevice libplist 1.12. The vulnerable component is the parse_data_node function in bplist.c, where crafted plist files can trigger a memory allocation error, allowing local users to cause a denial of service. The linked OpenVAS/Nessus entries corroborate ...