NVD

Id
52017  
Name
CVE-2009-4902  
Description
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-06-18  
Modified Date
2010-08-12  
Seq
2009-4902  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262943 52017 CVE-2009-4902 FEDORA-2010-10764  View
262944 52017 CVE-2009-4902 FEDORA-2010-9995  View
262945 52017 CVE-2009-4902 FEDORA-2010-10014  View
262946 52017 CVE-2009-4902 http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4334  View
262947 52017 CVE-2009-4902 DSA-2059  View
262948 52017 CVE-2009-4902 40758  View
262949 52017 CVE-2009-4902 ADV-2010-1427  View
262950 52017 CVE-2009-4902 ADV-2010-1508  View
262951 52017 CVE-2009-4902 https://bugzilla.redhat.com/show_bug.cgi?id=596426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38630 JVNDB-2010-004415 MUSCLE PCSC-Lite の PC/SC Smart Card daemon におけるバッファオーバーフローの脆弱性 MUSCLE PCSC-Lite の PC/SC Smart Card daemon の winscard_svc.c の MSGFunctionDemarshall 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2009-4902 42333 CVE-2009-4902 52017 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004415.html 2010-06-18 2012-09-25 View