CVE-2010-0407 Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via c...
MediumCVSS 6.8
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| muscle pcsc-lite | <= 1.5.3 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta2 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta3 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta4 | No fix listed |
| muscle pcsc-lite | = 1.1.2-beta5 | No fix listed |
| muscle pcsc-lite | = 1.2.0 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc1 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc2 | No fix listed |
| muscle pcsc-lite | = 1.2.0-rc3 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta1 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta10 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta2 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta3 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta4 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta5 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta6 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta7 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta8 | No fix listed |
| muscle pcsc-lite | = 1.2.9-beta9 | No fix listed |
| muscle pcsc-lite | = 1.3.0 | No fix listed |
| muscle pcsc-lite | = 1.3.1 | No fix listed |
| muscle pcsc-lite | = 1.3.2 | No fix listed |
| muscle pcsc-lite | = 1.3.3 | No fix listed |
| muscle pcsc-lite | = 1.4.0 | No fix listed |
| muscle pcsc-lite | = 1.4.1 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| muscle pcsc-lite | = 1.4.2 | No fix listed |
| muscle pcsc-lite | = 1.4.3 | No fix listed |
| muscle pcsc-lite | = 1.4.4 | No fix listed |
| muscle pcsc-lite | = 1.4.99 | No fix listed |
| muscle pcsc-lite | = 1.4.100 | No fix listed |
| muscle pcsc-lite | = 1.4.101 | No fix listed |
| muscle pcsc-lite | = 1.4.102 | No fix listed |
| muscle pcsc-lite | = 1.5.0 | No fix listed |
| muscle pcsc-lite | = 1.5.1 | No fix listed |
| muscle pcsc-lite | = 1.5.2 | No fix listed |
| debian/pcsc-lite(Debian:12) | < 1.5.4-1 | 1.5.4-1 |
| debian/pcsc-lite(Debian:13) | < 1.5.4-1 | 1.5.4-1 |
| debian/pcsc-lite(Debian:14) | < 1.5.4-1 | 1.5.4-1 |
References
- kb.juniper.net
- kb.juniper.net
- FEDORA-2010-10764 vendor-advisory
- FEDORA-2010-9995 vendor-advisory
- FEDORA-2010-10014 vendor-advisory
- SUSE-SR:2010:017 vendor-advisory
- 40140 third-party-advisory vendor-advisory
- 40239 third-party-advisory vendor-advisory
- svn.debian.org
- DSA-2059 patch vendor-advisory
- 40758 patch vdb-entry
- ADV-2010-1427 vdb-entry vendor-advisory
- ADV-2010-1508 vdb-entry vendor-advisory
- bugzilla.redhat.com patch
- Debian Security Tracker CVE-2010-0407 vendor-advisory