NVD

Id
10637  
Name
CVE-2011-4111  
Description
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2014-02-26  
Modified Date
2014-02-27  
Seq
2011-4111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60156 10637 CVE-2011-4111 http://git.qemu.org/?p=qemu-stable-0.15.git;a=log  View
60157 10637 CVE-2011-4111 http://git.qemu.org/?p=qemu.git;a=log;h=refs/heads/stable-1.0  View
60158 10637 CVE-2011-4111 RHSA-2011:1777  View
60159 10637 CVE-2011-4111 RHSA-2011:1801  View
60160 10637 CVE-2011-4111 https://bugzilla.redhat.com/show_bug.cgi?id=751310  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35052 JVNDB-2011-005294 QEMU の hw/ccid-card-passthru.c におけるバッファオーバーフローの脆弱性 QEMU の hw/ccid-card-passthru.c 内の ccid_card_vscard_handle_message 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-4111 52018 CVE-2011-4111 10637 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005294.html 2011-11-20 2014-03-03 View