CVE-2010-4530: Integer Overflow
An integer overflow, leading to array index error was found in the way USB CCID (Chip/Smart Card Interface Devices) driver processed certain values of card serial number. A local attacker could use this flaw to execute arbitrary code, with the privileges of the user running the pcscd daemon, via a malicious smart card with specially-crafted value of its serial number, inserted to the system USB port.
References: [1] http://labs.mwrinfosecurity.com/files/Advisories/mwripcsc-libccid-buffer-overflow2010-12-13.pdf [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607780
Upstream changesets: [3] http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004934.html [4] http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004935.html
Other sources
Signedness error in ccidserial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4530?
CVE-2010-4530 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2010-4530?
To fix CVE-2010-4530, you should update to the latest version of PCSC-Lite that addresses this vulnerability.
Who is affected by CVE-2010-4530?
CVE-2010-4530 affects users of PCSC-Lite version 1.5.3 and possibly other products utilizing the libccid driver.
What type of vulnerability is CVE-2010-4530?
CVE-2010-4530 is a signedness error vulnerability that can be exploited via crafted smart card serial numbers.
Can CVE-2010-4530 be exploited remotely?
CVE-2010-4530 requires physical proximity to exploit, making it a local attack vulnerability.