CVE Feed

    Dashboard / CVE / CVE-2015-10082

    CVE-2015-10082

    A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.

    Published:Feb 21, 2023
    Last Modified:Nov 21, 2024
    EPS:Feb 21, 2023
    EPSS Score:0.00088
    CVSS Score:5.5

    Affected Products

    Vendor
    Libimobiledevice
    Product
    Libplist

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-221 Data Serialization External Entities Blowup

    Related CVEs

    CVE-2017-7982 (CVSS 5.5) — Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 all…
    CVE-2017-5834 (CVSS 5.5) — The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bou…
    CVE-2017-5835 (CVSS 7.5) — libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involvi…
    CVE-2017-5545 (CVSS 9.1) — The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitiv…
    CVE-2017-5836 (CVSS 7.5) — The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via …
    CVE-2017-5209 (CVSS 9.1) — The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sen…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High