PT-2010-5623 · Muscle+1 · Pcsc-Lite+1

Jan Lieskovsky

·

Publicado

1970-01-01

·

Atualizado

2016-12-08

·

CVE-2010-0407

CVSS v2.0

6.8

Média

VetorAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PCSC-Lite versions prior to 1.5.4
Description The issue is related to multiple buffer overflows in the MSGFunctionDemarshall function in winscard svc.c in the PC/SC Smart Card daemon. This can allow local users to gain privileges via crafted message data, which is improperly demarshalled. The vulnerability may lead to a violation of confidentiality, integrity, and availability of protected information.
Recommendations For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the PC/SC Smart Card daemon to minimize the risk of exploitation.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-01171
BDU:2015-01172
BDU:2015-01173
CVE-2010-0407
DSA-2059-1
OPENSUSE-SU-2024:10246-1
RHSA-2010:0533
RHSA-2010:0602
RHSA-2010_0533

Produtos afetados

Pcsc-Lite
Red Hat