NVD

Id
15785  
Name
CVE-2010-4531  
Description
Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-01-18  
Modified Date
2011-02-05  
Seq
2010-4531  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89459 15785 CVE-2010-4531 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607781  View
89460 15785 CVE-2010-4531 http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow_2010-12-13.pdf  View
89461 15785 CVE-2010-4531 [Pcsclite-cvs-commit] 20101103 r5370 - /trunk/PCSC/src/atrhandler.c  View
89462 15785 CVE-2010-4531 FEDORA-2011-0164  View
89463 15785 CVE-2010-4531 FEDORA-2011-0123  View
89464 15785 CVE-2010-4531 DSA-2156  View
89465 15785 CVE-2010-4531 MDVSA-2011:015  View
89466 15785 CVE-2010-4531 [oss-security] 20101222 CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
89467 15785 CVE-2010-4531 [oss-security] 20110103 Re: CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR decoder [was: CVE request: opensc buffer overflow ]  View
89468 15785 CVE-2010-4531 45450  View
89469 15785 CVE-2010-4531 ADV-2010-3264  View
89470 15785 CVE-2010-4531 ADV-2011-0101  View
89471 15785 CVE-2010-4531 ADV-2011-0180  View
89472 15785 CVE-2010-4531 ADV-2011-0256  View
89473 15785 CVE-2010-4531 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4531  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33676 JVNDB-2011-003918 PCSC-Lite の ATRDecodeAtr 関数におけるスタックベースのバッファオーバーフローの脆弱性 PCSC-Lite の pcscd のAnswer-to-Reset (ATR) Handler (atrhandler.c) の ATRDecodeAtr 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4531 47111 CVE-2010-4531 15785 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003918.html 2011-01-18 2012-03-27 View