UBUNTU-CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-16391: Improper Restriction of Operations within the Bounds of a Memory Buffer

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

Traffic Muscle Car - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Traffic Muscle Car published at the 'play' market has multiple vulnerabilities...

Real Muscle Car - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Real Muscle Car published at the 'play' market has multiple vulnerabilities...

Muscle Premium - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Muscle Premium published at the 'play' market has multiple vulnerabilities...

pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

CVE-2009-4901

PCSC-Lite (pcscd) before version 1.5.4 is affected by two VMs: CVE-2009-4901 (denial of service via crafted SCARD_SET_ATTRIB data) and CVE-2010-0407 (privilege escalation via crafted message data). The root cause is in MSGFunctionDemarshall in winscard_svc.c, where improper demarshalling leads to...

CVE-2009-4902

CVE-2009-4902 relates to a buffer overflow in the MSGFunctionDemarshall function of winscard_svc.c in the MUSCLE PCSC-Lite daemon (pcscd) up to version 1.5.4. Crafted SCARD_CONTROL message data could be improperly demarshalled, enabling a local attacker to gain privileges. The issue is linked to ...

CVE-2009-4901

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

CVE-2010-0407

PCSC-Lite (pcscd) affected by CVE-2010-0407: multiple buffer overflows in MSGFunctionDemarshall within winscard_svc.c can allow local privilege escalation on MUSCLE PCSC-Lite before 1.5.4. Affected versions include 1.5.3 and earlier; remediation is upgrading to 1.5.4 or later (as noted in multipl...

CVE-2009-4901: Improper Restriction of Operations within the Bounds of a Memory Buffer

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

CVE-2009-4902: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARDCONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists...

CVE-2010-0407: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

CVE-2008-4631

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

CVE-2008-4631

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

CVE-2008-4631

CVE-2008-4631 refers to a stack-based buffer overflow in the MUSCLE project, specifically in the function Message::AddToString within message/Message.cpp , affecting versions prior to 4.40. The vulnerability allows remote attackers to crash the application (Denial of Service) and potentially exec...