CVE-2010-4523

OpenSC < 0.11.13 - Buffer Overflow via Smart Card Serial Number

Title source: llm
STIX 2.1

Description

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

References (19)

Core 19
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43068
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0212
Exploit, Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2010/12/22/3
Exploit, Patch x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:011
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052777.html
Exploit, Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=664831
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42807
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0109
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42658
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0009
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052796.html
Exploit, Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2010/12/21/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45435

Scores

EPSS 0.0086
EPSS Percentile 54.3%

Details

CWE
CWE-119
Status published
Products (35)
opensc-project/opensc 0.3.2
opensc-project/opensc 0.3.5
opensc-project/opensc 0.4.0
opensc-project/opensc 0.5.0
opensc-project/opensc 0.6.0
opensc-project/opensc 0.6.1
opensc-project/opensc 0.7.0
opensc-project/opensc 0.8
opensc-project/opensc 0.8.0
opensc-project/opensc 0.8.0.0
... and 25 more
Published Jan 07, 2011
Tracked Since Feb 18, 2026