Denial Of Service (DoS) Or Information Disclosure

libplist is susceptible to denial of service or information disclosure attacks. The attacks exist when a user passes an Apple Property List data that is that is shorter than 8 bytes to the main function in plistutil.c...

Libimobiledevice Libplist 'plistutil.c' stack buffer overflow vulnerability

libimobiledevice is a software protocol library and tool that allows Linux to support connectivity to iOS devices such as the iPhone, iPodTouch, etc. libplist is one of the libraries that handles the ApplePropertyList format in either binary or XML format. A stack buffer overflow vulnerability...

UBUNTU-CVE-2017-5545

The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via Apple Property List data that is too short...