CVE

Id
47114  
CVE No.
CVE-2010-4530  
Status
Candidate  
Description
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515238 47114 CVE-2010-4530 MLIST:[oss-security] 20101222 CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
515239 47114 CVE-2010-4530 URL:http://www.openwall.com/lists/oss-security/2010/12/22/7  View
515240 47114 CVE-2010-4530 MLIST:[oss-security] 20110103 Re: CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
515241 47114 CVE-2010-4530 URL:http://www.openwall.com/lists/oss-security/2011/01/03/3  View
515242 47114 CVE-2010-4530 MISC:http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-libccid-buffer-overflow_2010-12-13.pdf  View
515243 47114 CVE-2010-4530 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=664986  View
515244 47114 CVE-2010-4530 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
515245 47114 CVE-2010-4530 FEDORA:FEDORA-2011-0143  View
515246 47114 CVE-2010-4530 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053097.html  View
515247 47114 CVE-2010-4530 FEDORA:FEDORA-2011-0162  View
515248 47114 CVE-2010-4530 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053076.html  View
515249 47114 CVE-2010-4530 MANDRIVA:MDVSA-2011:014  View
515250 47114 CVE-2010-4530 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:014  View
515251 47114 CVE-2010-4530 REDHAT:RHSA-2013:1323  View
515252 47114 CVE-2010-4530 URL:http://rhn.redhat.com/errata/RHSA-2013-1323.html  View
515253 47114 CVE-2010-4530 BID:45806  View
515254 47114 CVE-2010-4530 URL:http://www.securityfocus.com/bid/45806  View
515255 47114 CVE-2010-4530 VUPEN:ADV-2011-0100  View
515256 47114 CVE-2010-4530 URL:http://www.vupen.com/english/advisories/2011/0100  View
515257 47114 CVE-2010-4530 VUPEN:ADV-2011-0179  View
515258 47114 CVE-2010-4530 URL:http://www.vupen.com/english/advisories/2011/0179  View
515259 47114 CVE-2010-4530 XF:pcsclite-ccid-code-execution(64961)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37719 JVNDB-2010-003504 Django の管理用のインターフェースにおける重要な情報を取得される脆弱性 Django の django.contrib.admin の管理用のインターフェースは、特定のオブジェクトフィルタを実行するクエリ文字列の使用を制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-4534 47114 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003504.html  View