CVE-2012-0065: Buffer Overflow
Published Oct 6, 2012
·Updated
Heap-based buffer overflow in the receivepacket function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
Affected Software
3 affected components
Nikias Bassen Usbmuxd=1.0.5
Nikias Bassen Usbmuxd=1.0.6
Nikias Bassen Usbmuxd=1.0.7
Remediation
Patch Available
Event History
Oct 6, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0065?
CVE-2012-0065 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2012-0065?
To fix CVE-2012-0065, update libusbmuxd to a version higher than 1.0.7.
3
Who is affected by CVE-2012-0065?
CVE-2012-0065 affects users running libusbmuxd versions 1.0.5, 1.0.6, and 1.0.7.
4
What type of vulnerability is CVE-2012-0065?
CVE-2012-0065 is a heap-based buffer overflow vulnerability.
5
Can CVE-2012-0065 be exploited remotely?
CVE-2012-0065 can be exploited by physically proximate attackers using crafted data.