CVE-2009-4902 Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via....
MediumCVSS 6.8
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| muscle pcsc-lite | <= 1.5.4 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta2 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta3 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta4 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta5 | No fix listed |
| muscle pcsc-lite | = 1.2.0 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc1 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc2 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc3 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta1 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta10 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta2 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta3 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta4 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta5 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta6 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta7 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta8 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta9 | No fix listed |
| muscle pcsc-lite | = 1.3.0 | No fix listed |
| muscle pcsc-lite | = 1.3.1 | No fix listed |
| muscle pcsc-lite | = 1.3.2 | No fix listed |
| muscle pcsc-lite | = 1.3.3 | No fix listed |
| muscle pcsc-lite | = 1.4.0 | No fix listed |
| muscle pcsc-lite | = 1.4.1 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| muscle pcsc-lite | = 1.4.2 | No fix listed |
| muscle pcsc-lite | = 1.4.3 | No fix listed |
| muscle pcsc-lite | = 1.4.4 | No fix listed |
| muscle pcsc-lite | = 1.4.99 | No fix listed |
| muscle pcsc-lite | = 1.4.100 | No fix listed |
| muscle pcsc-lite | = 1.4.101 | No fix listed |
| muscle pcsc-lite | = 1.4.102 | No fix listed |
| muscle pcsc-lite | = 1.5.0 | No fix listed |
| muscle pcsc-lite | = 1.5.1 | No fix listed |
| muscle pcsc-lite | = 1.5.2 | No fix listed |
References
- FEDORA-2010-10764 vendor-advisory
- FEDORA-2010-9995 vendor-advisory
- FEDORA-2010-10014 vendor-advisory
- 40140 third-party-advisory vendor-advisory
- 40239 third-party-advisory vendor-advisory
- svn.debian.org
- DSA-2059 vendor-advisory
- 40758 vdb-entry
- ADV-2010-1427 vdb-entry vendor-advisory
- ADV-2010-1508 vdb-entry vendor-advisory
- bugzilla.redhat.com
- Debian Security Tracker CVE-2009-4902 vendor-advisory