CVE-2010-4523 Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related....
HighCVSS 7.2
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensc-project opensc | <= 0.11.13 | No fix listed |
| opensc-project opensc | = 0.3.2 | No fix listed |
| opensc-project opensc | = 0.3.5 | No fix listed |
| opensc-project opensc | = 0.4.0 | No fix listed |
| opensc-project opensc | = 0.5.0 | No fix listed |
| opensc-project opensc | = 0.6.0 | No fix listed |
| opensc-project opensc | = 0.6.1 | No fix listed |
| opensc-project opensc | = 0.7.0 | No fix listed |
| opensc-project opensc | = 0.8 | No fix listed |
| opensc-project opensc | = 0.8.0 | No fix listed |
| opensc-project opensc | = 0.8.0.0 | No fix listed |
| opensc-project opensc | = 0.8.1 | No fix listed |
| opensc-project opensc | = 0.9 | No fix listed |
| opensc-project opensc | = 0.9.2 | No fix listed |
| opensc-project opensc | = 0.9.3 | No fix listed |
| opensc-project opensc | = 0.9.4 | No fix listed |
| opensc-project opensc | = 0.9.5 | No fix listed |
| opensc-project opensc | = 0.9.6 | No fix listed |
| opensc-project opensc | = 0.9.7 | No fix listed |
| opensc-project opensc | = 0.9.7-b | No fix listed |
| opensc-project opensc | = 0.9.7-d | No fix listed |
| opensc-project opensc | = 0.9.8 | No fix listed |
| opensc-project opensc | = 0.10.0 | No fix listed |
| opensc-project opensc | = 0.10.1 | No fix listed |
| opensc-project opensc | = 0.11.0 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opensc-project opensc | = 0.11.1 | No fix listed |
| opensc-project opensc | = 0.11.2 | No fix listed |
| opensc-project opensc | = 0.11.3 | No fix listed |
| opensc-project opensc | = 0.11.3-pre3 | No fix listed |
| opensc-project opensc | = 0.11.4 | No fix listed |
| opensc-project opensc | = 0.11.5 | No fix listed |
| opensc-project opensc | = 0.11.6 | No fix listed |
| opensc-project opensc | = 0.11.7 | No fix listed |
| opensc-project opensc | = 0.11.8 | No fix listed |
| opensc-project opensc | = 0.11.9 | No fix listed |
| opensc-project opensc | = 0.11.10 | No fix listed |
| opensc-project opensc | = 0.11.11 | No fix listed |
| opensc-project opensc | = 0.11.12 | No fix listed |
| debian/opensc(Debian:12) | < 0.11.13-1.1 | 0.11.13-1.1 |
| debian/opensc(Debian:13) | < 0.11.13-1.1 | 0.11.13-1.1 |
| debian/opensc(Debian:14) | < 0.11.13-1.1 | 0.11.13-1.1 |
References
- bugs.debian.org exploit patch
- labs.mwrinfosecurity.com exploit patch
- FEDORA-2010-19193 vendor-advisory
- FEDORA-2010-19192 vendor-advisory
- SUSE-SR:2011:002 vendor-advisory
- [oss-security] 20101221 CVE request: opensc buffer overflow exploit mailing-list patch
- [oss-security] 20101222 Re: CVE request: opensc buffer overflow exploit mailing-list patch
- 42658 third-party-advisory vendor-advisory
- 42807 third-party-advisory vendor-advisory
- 43068 third-party-advisory
- www.h-online.com patch
- MDVSA-2011:011 vendor-advisory
- 45435 vdb-entry
- ADV-2011-0009 vdb-entry vendor-advisory
- ADV-2011-0109 vdb-entry
- ADV-2011-0212 vdb-entry
- bugs.launchpad.net patch
- bugzilla.redhat.com exploit patch
- www.opensc-project.org patch
- Debian Security Tracker CVE-2010-4523 vendor-advisory
- bugs.debian.org issue-tracking