CVE-2010-0407: Buffer Overflow
Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-0407?
CVE-2010-0407 has a critical severity level due to multiple buffer overflows allowing local users to gain elevated privileges.
How do I fix CVE-2010-0407?
To fix CVE-2010-0407, upgrade to PC/SC Lite version 1.5.4 or later to mitigate the buffer overflow vulnerabilities.
Which versions of PC/SC Lite are affected by CVE-2010-0407?
CVE-2010-0407 affects multiple versions of PC/SC Lite, including 1.2.0, 1.4.3, and all beta versions prior to 1.5.4.
Who can exploit CVE-2010-0407?
CVE-2010-0407 can be exploited by local users with access to the PC/SC Smart Card daemon.
What is the potential impact of CVE-2010-0407?
The potential impact of CVE-2010-0407 includes unauthorized privilege escalation on systems running vulnerable versions of PC/SC Lite.