CVE-2010-0407

2010-06-1816:30:00

Debian Security Bug Tracker

security-tracker.debian.org

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

JSON

Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

OSVersionArchitecturePackageVersionFilename
Debian12allpcsc-lite< 1.5.4-1pcsc-lite_1.5.4-1_all.deb
Debian11allpcsc-lite< 1.5.4-1pcsc-lite_1.5.4-1_all.deb
Debian10allpcsc-lite< 1.5.4-1pcsc-lite_1.5.4-1_all.deb
Debian999allpcsc-lite< 1.5.4-1pcsc-lite_1.5.4-1_all.deb
Debian13allpcsc-lite< 1.5.4-1pcsc-lite_1.5.4-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pcsc-lite	< 1.5.4-1	pcsc-lite_1.5.4-1_all.deb
Debian	11	all	pcsc-lite	< 1.5.4-1	pcsc-lite_1.5.4-1_all.deb
Debian	10	all	pcsc-lite	< 1.5.4-1	pcsc-lite_1.5.4-1_all.deb
Debian	999	all	pcsc-lite	< 1.5.4-1	pcsc-lite_1.5.4-1_all.deb
Debian	13	all	pcsc-lite	< 1.5.4-1	pcsc-lite_1.5.4-1_all.deb