Scientific Linux Security Update : pcsc-lite on SL6.x i386/x86_64 (20130221)

A stack-based buffer overflow flaw was found in the way pcsc-lite decoded certain attribute values of Answer-to-Reset ATR messages. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the pcscd daemon root, by default, by inserting a specially...

RedHat Update for pcsc-lite RHSA-2013:0525-02

Check for the Version of pcsc-lite OpenVAS Vulnerability Test RedHat Update for pcsc-lite RHSA-2013:0525-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

pcsc-lite: Stack-based buffer overflow in Answer-to-Reset (ATR) decoder

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...

qemu: ccid: buffer overflow in handling of VSC_ATR message

Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted VSCATR message...

PT-2014-2164 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 0.15.2 QEMU versions 1.x prior to 1.0-rc4 Description: The issue is related to a buffer overflow in the ccid card vscard handle message function, which can be triggered by a crafted VSC ATR message. This could lead to a...

Ubuntu Update for pcsc-lite USN-1125-1

Ubuntu Update for Linux kernel vulnerabilities USN-1125-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11251.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for pcsc-lite USN-1125-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

USN-1125-1: PCSC-Lite vulnerability

Rafael Dominguez Vega discovered that PCSC-Lite incorrectly handled smart cards with malformed ATR messages. An attacker having physical access could exploit this with a special smart card and cause a denial of service or execute arbitrary code...

[ MDVSA-2011:015 ] pcsc-lite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:015 http://www.mandriva.com/security/ Package : pcsc-lite Date : January 20, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found an...

DEBIAN-CVE-2010-4531

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...

CVE-2010-4531

CVE-2010-4531 : PCSC-Lite’s ATRDecodeAtr in the ATR Handler (atrhandler.c) suffers a stack-based buffer overflow. The issue affects pcscd in PCSC-Lite 1.5.3 and possibly other 1.5.x/1.6.x versions, allowing a physically proximate attacker to cause a denial of service and potentially execute arbit...

CVE-2010-4531

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...

CVE-2010-4531

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...

PT-2011-1049 · Muscle +2 · Pcsc-Lite +2

Name of the Vulnerable Software and Affected Versions: pcsc-lite versions 1.5.3 through 1.6.6 pcsc-lite versions prior to 1.6.6 Description: The issue affects the pcsc-lite package, potentially leading to breaches of confidentiality, integrity, and availability of protected information. It can be...

CVE-2010-4531

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...

Fedora 14 : pcsc-lite-1.6.4-3.fc14 (2011-0164)

This update fixes the following security issue : A stack-based buffer overflow flaw was found in the way PC/SC Lite smart card framework decoded certain attribute values of the Answer-to-Reset ATR message, received back from the card after connecting. A local attacker could use this flaw to execu...