NVD

Id
15777  
Name
CVE-2010-4523  
Description
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-07  
Modified Date
2011-02-17  
Seq
2010-4523  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89366 15777 CVE-2010-4523 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427  View
89367 15777 CVE-2010-4523 http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf  View
89368 15777 CVE-2010-4523 FEDORA-2010-19193  View
89369 15777 CVE-2010-4523 FEDORA-2010-19192  View
89370 15777 CVE-2010-4523 SUSE-SR:2011:002  View
89371 15777 CVE-2010-4523 [oss-security] 20101221 CVE request: opensc buffer overflow  View
89372 15777 CVE-2010-4523 [oss-security] 20101222 Re: CVE request: opensc buffer overflow  View
89373 15777 CVE-2010-4523 http://www.h-online.com/open/news/item/When-a-smart-card-can-root-your-computer-1154829.html  View
89374 15777 CVE-2010-4523 MDVSA-2011:011  View
89375 15777 CVE-2010-4523 45435  View
89376 15777 CVE-2010-4523 ADV-2011-0009  View
89377 15777 CVE-2010-4523 ADV-2011-0109  View
89378 15777 CVE-2010-4523 ADV-2011-0212  View
89379 15777 CVE-2010-4523 https://bugs.launchpad.net/ubuntu/+source/opensc/+bug/692483  View
89380 15777 CVE-2010-4523 https://bugzilla.redhat.com/show_bug.cgi?id=664831  View
89381 15777 CVE-2010-4523 https://www.opensc-project.org/opensc/changeset/4913  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33672 JVNDB-2011-003914 OpenSC の libopensc におけるスタックベースのバッファオーバーフローの脆弱性 OpenSC の libopensc には、(1) card-acos5.c、(2) card-atrust-acos.c、または (3) card-starcos.c に関する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4523 47103 CVE-2010-4523 15777 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003914.html 2011-01-07 2012-03-27 View