NVD

Id
15784  
Name
CVE-2010-4530  
Description
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-01-18  
Modified Date
2016-12-07  
Seq
2010-4530  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89446 15784 CVE-2010-4530 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
89447 15784 CVE-2010-4530 http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-libccid-buffer-overflow_2010-12-13.pdf  View
89448 15784 CVE-2010-4530 FEDORA-2011-0162  View
89449 15784 CVE-2010-4530 FEDORA-2011-0143  View
89450 15784 CVE-2010-4530 RHSA-2013:1323  View
89451 15784 CVE-2010-4530 MDVSA-2011:014  View
89452 15784 CVE-2010-4530 [oss-security] 20101222 CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
89453 15784 CVE-2010-4530 [oss-security] 20110103 Re: CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
89454 15784 CVE-2010-4530 45806  View
89455 15784 CVE-2010-4530 ADV-2011-0100  View
89456 15784 CVE-2010-4530 ADV-2011-0179  View
89457 15784 CVE-2010-4530 pcsclite-ccid-code-execution(64961)  View
89458 15784 CVE-2010-4530 https://bugzilla.redhat.com/show_bug.cgi?id=664986  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33675 JVNDB-2011-003917 PCSC-Lite などの製品で使用される USB CCID ドライバの libccid における任意のコードを実行される脆弱性 PCSC-Lite などの製品で使用される USB Chip/Smart Card Interface Devices (CCID) ドライバの libccid の ccid_serial.c は、符号化エラーが発生するため、任意のコードを実行される脆弱性が存在します。 CVE-2010-4530 47110 CVE-2010-4530 15784 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003917.html 2011-01-18 2012-03-27 View