Description
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/40758 ↗
- http://www.debian.org/security/2010/dsa-2059 ↗
- http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208 ↗
- http://secunia.com/advisories/40239 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html ↗
- http://secunia.com/advisories/40140 ↗
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html ↗
- http://www.vupen.com/english/advisories/2010/1427 ↗
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html ↗
- http://www.vupen.com/english/advisories/2010/1508 ↗
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=596426 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html ↗