CVE-2008-3972

Published: Sep 11, 2008Modified: Apr 23, 2026

6.6

Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Exploitability: 3.9 / Impact: 9.2

Source: NVD

Description

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.

Affected (21)

Products: Opensc Project: Opensc

Opensc Project

1 product

Opensc

Configuration A

21 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Opensc Project Opensc	Up to 0.11.5
Opensc Project Opensc	Version 0.10.0
Opensc Project Opensc	Version 0.10.1
Opensc Project Opensc	Version 0.11.0
Opensc Project Opensc	Version 0.11.1
Opensc Project Opensc	Version 0.11.2
Opensc Project Opensc	Version 0.11.3
Opensc Project Opensc	Version 0.11.3 pre3
Opensc Project Opensc	Version 0.11.4
Opensc Project Opensc	Version 0.4.0
Opensc Project Opensc	Version 0.5.0
Opensc Project Opensc	Version 0.6.0
Opensc Project Opensc	Version 0.6.1
Opensc Project Opensc	Version 0.7.0
Opensc Project Opensc	Version 0.8.0
Opensc Project Opensc	Version 0.8.1
Opensc Project Opensc	Version 0.9.2
Opensc Project Opensc	Version 0.9.3
Opensc Project Opensc	Version 0.9.4
Opensc Project Opensc	Version 0.9.5
Opensc Project Opensc	Version 0.9.6