6.8
CVSSv2

CVE-2010-0407

Published: 18/06/2010 Updated: 08/12/2016
CVSS v2 Base Score: 6.8 | Impact Score: 10 | Exploitability Score: 3.1
VMScore: 605
Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite prior to 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

Vulnerable Product Search on Vulmon Subscribe to Product

muscle pcsc-lite

muscle pcsc-lite 1.5.2

muscle pcsc-lite 1.4.4

muscle pcsc-lite 1.4.3

muscle pcsc-lite 1.3.0

muscle pcsc-lite 1.2.9

muscle pcsc-lite 1.1.2

muscle pcsc-lite 1.4.102

muscle pcsc-lite 1.4.101

muscle pcsc-lite 1.4.0

muscle pcsc-lite 1.3.3

muscle pcsc-lite 1.2.0

muscle pcsc-lite 1.4.100

muscle pcsc-lite 1.4.99

muscle pcsc-lite 1.3.2

muscle pcsc-lite 1.3.1

muscle pcsc-lite 1.5.1

muscle pcsc-lite 1.5.0

muscle pcsc-lite 1.4.2

muscle pcsc-lite 1.4.1

Vendor Advisories

Multiple buffer overflows in PC/SC service ...
It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root For the stable distribution (lenny), this problem has been fixed in version 14102-1+lenny1 For the unstable distribution (sid), this problem has been fixed in version 154-1 We recommend ...