CVE-2012-0065

usbmuxd 1.0.5-1.0.7 - Heap-Based Buffer Overflow via SerialNumber Field

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.

References (10)

Core 10
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:133
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2012/01/19/26
Third Party Advisory x_refsource_confirm
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0228
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51573
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:133
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47545
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72546
Issue Tracking x_refsource_misc
https://bugs.gentoo.org/show_bug.cgi?id=399409
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2012/01/19/25

Scores

EPSS 0.0076
EPSS Percentile 50.8%

Details

CWE
CWE-119
Status published
Products (3)
nikias_bassen/usbmuxd 1.0.5
nikias_bassen/usbmuxd 1.0.6
nikias_bassen/usbmuxd 1.0.7
Published Oct 06, 2012
Tracked Since Feb 18, 2026