CVE-2010-4523: Buffer Overflow
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.
Other sources
Three stack-based buffer overflow flaws were found in the way OpenSC device drivers for A-Trust ACOS, ACS ACOS5 and STARCOS SPK 2.3 based smart cards processed certain values of card serial number. A local attacker could use this flaw to execute arbitrary code, with the privileges of the user running the opesc-tool or opensc-explorer binaries via a malicious smart card, with specially-crafted value of its serial number, inserted to the system.
References: [1] http://labs.mwrinfosecurity.com/files/Advisories/mwriopensc-get-serial-buffer-overflow2010-12-13.pdf [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607732 [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427 [4] http://www.h-online.com/open/news/item/When-a-smart-card-can-root-your-computer-1154829.html [5] https://bugs.launchpad.net/ubuntu/+source/opensc/+bug/692483
Upstream changesets: [6] https://www.opensc-project.org/opensc/changeset/4913 [7] https://www.opensc-project.org/opensc/changeset/4912
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4523?
CVE-2010-4523 has a moderate severity rating due to the potential for arbitrary code execution if exploited.
How do I fix CVE-2010-4523?
To resolve CVE-2010-4523, upgrade OpenSC to version 0.11.14 or later, which includes patches addressing the buffer overflow vulnerabilities.
What systems are affected by CVE-2010-4523?
CVE-2010-4523 affects OpenSC versions 0.11.13 and earlier, including all the specific versions listed in the CVE description.
What causes the vulnerability in CVE-2010-4523?
The vulnerability in CVE-2010-4523 is caused by multiple stack-based buffer overflows in the libopensc component when handling long serial-number fields from smart cards.
Who can exploit the vulnerability described in CVE-2010-4523?
CVE-2010-4523 can be exploited by physically proximate attackers who have access to smart cards with long serial-number fields.