CVE-2009-4901

PCSC-Lite (pcscd) before version 1.5.4 is affected by two VMs: CVE-2009-4901 (denial of service via crafted SCARD_SET_ATTRIB data) and CVE-2010-0407 (privilege escalation via crafted message data). The root cause is in MSGFunctionDemarshall in winscard_svc.c, where improper demarshalling leads to...

CVE-2009-4901

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

CVE-2010-0407

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

CVE-2010-0407

PCSC-Lite (pcscd) affected by CVE-2010-0407: multiple buffer overflows in MSGFunctionDemarshall within winscard_svc.c can allow local privilege escalation on MUSCLE PCSC-Lite before 1.5.4. Affected versions include 1.5.3 and earlier; remediation is upgrading to 1.5.4 or later (as noted in multipl...

CVE-2009-4902

Buffer overflow in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARDCONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists...

CVE-2009-4901

The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service daemon crash via crafted SCARDSETATTRIB message data, which is improperly demarshalled and triggers a buffer over-read...

CVE-2010-0407

Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled...

[SECURITY] Fedora 11 Update: pcsc-lite-1.5.2-3.fc11

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

CP3 Studio PC 2.0 Denial Of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...

CP3 Studio PC Version - Denial of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...

Microsoft Help and Support Center 'sysinfo/sysinfomain.htm' Cross Site Scripting Weakness

Description Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an unsuspecting user. NOTE: This issue is a...

Multiple Vendors rpc.pcnfsd Syslog Format String Remote Code Execution (CVE-2010-1039)

The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication services on remote machines. These services include authentication for mounting and for print spooling. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The...

Gumblar Botnet Shifts Tactics

The criminals behind the Gumblar botnet and malware campaign have been adapting their techniques, as attackers are wont to do, in order not only to evade detection but to prevent researchers from downloading and analyzing new versions of the malware. A new analysis of the recent activity by Gumbl...

Mandriva Update for kernel MDVSA-2010:088 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:088 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

How Assumptions May Be Making Us All Less Secure

In the space of a given year, untold thousands of vulnerabilities are found in operating systems, applications and plug-ins. In many cases, the affected vendors fix the flaws, either with a patch, a workaround or some other mitigation. But there’s also a huge population of security bugs that...

iPad Users with PCs Targeted By Malware

A malicious spam email campaign has been targeting iPad users who own PCs, says researchers. Read the full article. Help Net Security...

VMWare Tools软件包库引用代码执行漏洞

BUGTRAQ ID: 39392 CVE ID: CVE-2010-1141 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare产品中所使用的VMWare Tools软件包没有正确地访问函数库，Windows平台的Guest操作系统用户受骗点击了网络共享上所存储的文件就会导致执行任意代码。 VMWare Workstation 5.5.x VMWare ACE 2.5.x VMWare Player 2.5.x VMWare Server 2.x VMWare Fusion 2.x VMWare ESX 4.0...

CVE-2010-1225

The memory-management implementation in the Virtual Machine Monitor aka VMM or hypervisor in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allo...

Privilege escalation

The memory-management implementation in the Virtual Machine Monitor aka VMM or hypervisor in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allo...

CVE-2010-1225

The CVE-2010-1225 issue affects Microsoft Virtual PC 2007 Gold/SP1, Virtual Server 2005 Gold/R2 SP1, and Windows Virtual PC. The root cause is a memory-management flaw where the VMM work-area memory is not properly protected from guest access, allowing context-dependent attackers to bypass some g...