CVE-2017-6437

Name of the Vulnerable Software and Affected Versions libplist version 1.12

Description The issue allows local users to cause a denial of service, specifically an out-of-bounds read, by utilizing a crafted plist file. This is due to a problem in the base64encode function located in base64.c.

Recommendations For libplist version 1.12, consider avoiding the use of the base64encode function until a patch is available. As a temporary workaround, restrict the processing of crafted plist files to minimize the risk of exploitation.