CVE

Id
42991  
CVE No.
CVE-2010-0407  
Status
Candidate  
Description
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468486 42991 CVE-2010-0407 CONFIRM:http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208  View
468487 42991 CVE-2010-0407 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=596426  View
468488 42991 CVE-2010-0407 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691  View
468489 42991 CVE-2010-0407 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
468490 42991 CVE-2010-0407 DEBIAN:DSA-2059  View
468491 42991 CVE-2010-0407 URL:http://www.debian.org/security/2010/dsa-2059  View
468492 42991 CVE-2010-0407 FEDORA:FEDORA-2010-10014  View
468493 42991 CVE-2010-0407 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html  View
468494 42991 CVE-2010-0407 FEDORA:FEDORA-2010-9995  View
468495 42991 CVE-2010-0407 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html  View
468496 42991 CVE-2010-0407 FEDORA:FEDORA-2010-10764  View
468497 42991 CVE-2010-0407 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html  View
468498 42991 CVE-2010-0407 SUSE:SUSE-SR:2010:017  View
468499 42991 CVE-2010-0407 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
468500 42991 CVE-2010-0407 BID:40758  View
468501 42991 CVE-2010-0407 URL:http://www.securityfocus.com/bid/40758  View
468502 42991 CVE-2010-0407 SECUNIA:40140  View
468503 42991 CVE-2010-0407 URL:http://secunia.com/advisories/40140  View
468504 42991 CVE-2010-0407 SECUNIA:40239  View
468505 42991 CVE-2010-0407 URL:http://secunia.com/advisories/40239  View
468506 42991 CVE-2010-0407 VUPEN:ADV-2010-1427  View
468507 42991 CVE-2010-0407 URL:http://www.vupen.com/english/advisories/2010/1427  View
468508 42991 CVE-2010-0407 VUPEN:ADV-2010-1508  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35371 JVNDB-2010-001151 SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性 SystemTap の tapset/aux_syscalls.stp の _get_argv および _get_compat_argv 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0411 42991 4.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001151.html  View