CVE-2017-6435

Name of the Vulnerable Software and Affected Versions libplist version 1.12

Description The issue allows local users to cause a denial of service, specifically memory corruption, by utilizing a crafted plist file. This is due to a problem in the parse string node function in bplist.c.

Recommendations For libplist version 1.12, consider updating to a newer version that addresses this issue, as the current version allows for memory corruption via a crafted plist file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.