libimobiledevice 1.1.4
Approved changes feed: RSS · Atom
cpe:2.3:a:libimobiledevice:libimobiledevice:1.1.4:*:*:*:*:*:*:*
part: a version: 1.1.4 update: *
| Vendor | Libimobiledevice (20aa7f0c-77d6-5666-a295-0cbef43d2ac3) |
|---|---|
| Product | Libimobiledevice (681ef15b-fc20-58d5-972e-8fdc420efcc1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352021 |
pkg:deb/ubuntu/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352023 |
pkg:github/libimobiledevice/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352024 |
pkg:gitlab/redhat/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352025 |
pkg:rpm/centos/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352027 |
pkg:rpm/fedora/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352028 |
pkg:rpm/opensuse/libimobiledevice |
purl2cpe | 2026-06-01 10:18:19.352029 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2142 |
vulnerable | 2026-06-08 05:03:58.620682 |
Details available
userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.
Published: 2014-01-19T16:00:00.000Z
Updated: 2024-08-06T15:27:40.873Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.