CVE

Id
87610  
CVE No.
CVE-2016-10109  
Status
Candidate  
Description
Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.  
Phase
Assigned (20170103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764323 87610 CVE-2016-10109 MLIST:[oss-security] 20170103 Re: CVE Request: pcsc-lite use-after-free and double-free  View
764324 87610 CVE-2016-10109 URL:http://www.openwall.com/lists/oss-security/2017/01/03/3  View
764325 87610 CVE-2016-10109 MLIST:[pcsclite-muscle] 20161226 New pcsc-lite 1.8.20  View
764326 87610 CVE-2016-10109 URL:https://lists.alioth.debian.org/pipermail/pcsclite-muscle/Week-of-Mon-20161226/000779.html  View
764327 87610 CVE-2016-10109 CONFIRM:https://anonscm.debian.org/cgit/pcsclite/PCSC.git/commit/?id=697fe05967af7ea215bcd5d5774be587780c9e22  View
764328 87610 CVE-2016-10109 UBUNTU:USN-3176-1  View
764329 87610 CVE-2016-10109 URL:http://www.ubuntu.com/usn/USN-3176-1  View
764330 87610 CVE-2016-10109 BID:95263  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1810 JVNDB-2016-002583 Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 Microsoft Internet Explorer 10、11、および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR には、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1104 87610 9.3 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002583.html  View