2.1
CVSSv2

CVE-2009-4901

Published: 18/06/2010 Updated: 08/12/2016
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite prior to 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407.

Vulnerable Product Search on Vulmon Subscribe to Product

muscle pcsc-lite 1.4.102

muscle pcsc-lite 1.4.101

muscle pcsc-lite 1.4.0

muscle pcsc-lite 1.3.3

muscle pcsc-lite 1.2.9

muscle pcsc-lite 1.2.0

muscle pcsc-lite

muscle pcsc-lite 1.5.2

muscle pcsc-lite 1.4.4

muscle pcsc-lite 1.4.3

muscle pcsc-lite 1.3.0

muscle pcsc-lite 1.1.2

muscle pcsc-lite 1.5.1

muscle pcsc-lite 1.5.0

muscle pcsc-lite 1.4.2

muscle pcsc-lite 1.4.1

muscle pcsc-lite 1.4.100

muscle pcsc-lite 1.4.99

muscle pcsc-lite 1.3.2

muscle pcsc-lite 1.3.1

Vendor Advisories

Multiple buffer overflows in PC/SC service ...