CVE-2010-4523

2011-01-0720:00:00

Debian Security Bug Tracker

security-tracker.debian.org

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

61.7%

JSON

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

OSVersionArchitecturePackageVersionFilename
Debian12allopensc< 0.11.13-1.1opensc_0.11.13-1.1_all.deb
Debian11allopensc< 0.11.13-1.1opensc_0.11.13-1.1_all.deb
Debian10allopensc< 0.11.13-1.1opensc_0.11.13-1.1_all.deb
Debian999allopensc< 0.11.13-1.1opensc_0.11.13-1.1_all.deb
Debian13allopensc< 0.11.13-1.1opensc_0.11.13-1.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	opensc	< 0.11.13-1.1	opensc_0.11.13-1.1_all.deb
Debian	11	all	opensc	< 0.11.13-1.1	opensc_0.11.13-1.1_all.deb
Debian	10	all	opensc	< 0.11.13-1.1	opensc_0.11.13-1.1_all.deb
Debian	999	all	opensc	< 0.11.13-1.1	opensc_0.11.13-1.1_all.deb
Debian	13	all	opensc	< 0.11.13-1.1	opensc_0.11.13-1.1_all.deb