CVE-2017-7982: Integer Overflow
Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7982?
CVE-2017-7982 is classified as a denial of service vulnerability due to an integer overflow that can lead to application crashes.
How do I fix CVE-2017-7982?
To fix CVE-2017-7982, upgrade to libplist version 1.12 or later, where the vulnerability has been addressed.
What are the potential impacts of CVE-2017-7982?
The potential impacts of CVE-2017-7982 include denial of service through heap-based buffer over-read and application crashes.
Who is affected by CVE-2017-7982?
CVE-2017-7982 affects users of libplist versions prior to 1.12, particularly in environments handling crafted plist files.
Can CVE-2017-7982 be exploited remotely?
Yes, CVE-2017-7982 can be exploited remotely by attackers via specially crafted plist files.