CVE-2012-0065

2012-01-2700:00:00

ubuntu.com

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.2%

JSON

Heap-based buffer overflow in the receive_packet function in
libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically
proximate attackers to execute arbitrary code via a long SerialNumber field
in a property list.

Bugs

Notes

Author	Note
jdstrand	Ubuntu 10.10 and lower not affected

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchusbmuxd< 1.0.7-1ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchusbmuxd< 1.0.7-1ubuntu0.11.10.1UNKNOWN