CVE-2012-0065 Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNum...
MediumCVSS 4.6
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/usbmuxd(Debian:12) | < 1.0.7-2 | 1.0.7-2 |
| debian/usbmuxd(Debian:13) | < 1.0.7-2 | 1.0.7-2 |
| debian/usbmuxd(Debian:14) | < 1.0.7-2 | 1.0.7-2 |
| nikias bassen usbmuxd | = 1.0.5 | No fix listed |
| nikias bassen usbmuxd | = 1.0.6 | No fix listed |
| nikias bassen usbmuxd | = 1.0.7 | No fix listed |
References
- Debian Security Tracker CVE-2012-0065 vendor-advisory
- git.marcansoft.com
- [oss-security] 20120119 CVE request: usbmuxd 1.0.7 "receive_packet()" Buffer Overflow Vulnerability mailing-list patch
- [oss-security] 20120119 Re: CVE request: usbmuxd 1.0.7 "receive_packet()" Buffer Overflow Vulnerability mailing-list
- 47545 third-party-advisory vendor-advisory
- MDVSA-2012:133 vendor-advisory
- MDVSA-2013:133 vendor-advisory
- 51573 vdb-entry
- bugs.gentoo.org
- usbmuxd-libusbmuxd-bo(72546) vdb-entry
- wiki.mageia.org
- bugs.debian.org issue-tracking