CVE-2010-4523

Published: Jan 7, 2011Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Affected (38)

Products: Opensc Project: Opensc

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Opensc Project Opensc	Up to 0.11.13
Opensc Project Opensc	Version 0.10.0
Opensc Project Opensc	Version 0.10.1
Opensc Project Opensc	Version 0.11.0
Opensc Project Opensc	Version 0.11.10
Opensc Project Opensc	Version 0.11.11
Opensc Project Opensc	Version 0.11.12
Opensc Project Opensc	Version 0.11.1
Opensc Project Opensc	Version 0.11.2
Opensc Project Opensc	Version 0.11.3
Opensc Project Opensc	Version 0.11.3 pre3
Opensc Project Opensc	Version 0.11.4
Opensc Project Opensc	Version 0.11.5
Opensc Project Opensc	Version 0.11.6
Opensc Project Opensc	Version 0.11.7
Opensc Project Opensc	Version 0.11.8
Opensc Project Opensc	Version 0.11.9
Opensc Project Opensc	Version 0.3.2
Opensc Project Opensc	Version 0.3.5
Opensc Project Opensc	Version 0.4.0
Opensc Project Opensc	Version 0.5.0
Opensc Project Opensc	Version 0.6.0
Opensc Project Opensc	Version 0.6.1
Opensc Project Opensc	Version 0.7.0
Opensc Project Opensc	Version 0.8.0.0
Opensc Project Opensc	Version 0.8.0
Opensc Project Opensc	Version 0.8.1
Opensc Project Opensc	Version 0.8
Opensc Project Opensc	Version 0.9.2
Opensc Project Opensc	Version 0.9.3
Opensc Project Opensc	Version 0.9.4
Opensc Project Opensc	Version 0.9.5
Opensc Project Opensc	Version 0.9.6
Opensc Project Opensc	Version 0.9.7
Opensc Project Opensc	Version 0.9.7 b
Opensc Project Opensc	Version 0.9.7 d
Opensc Project Opensc	Version 0.9.8
Opensc Project Opensc	Version 0.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427

Source: secalert@redhat.com

ExploitPatch

http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf

Source: secalert@redhat.com

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052777.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052796.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2010/12/21/2

Source: secalert@redhat.com

ExploitPatch

http://openwall.com/lists/oss-security/2010/12/22/3

Source: secalert@redhat.com

ExploitPatch

http://secunia.com/advisories/42658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42807

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43068

Source: secalert@redhat.com

http://www.h-online.com/open/news/item/When-a-smart-card-can-root-your-computer-1154829.html

Source: secalert@redhat.com

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:011

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45435

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0009

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0109

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0212

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/opensc/+bug/692483

Source: secalert@redhat.com

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=664831

Source: secalert@redhat.com

ExploitPatch

https://www.opensc-project.org/opensc/changeset/4913

Source: secalert@redhat.com

Patch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052777.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052796.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2010/12/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://openwall.com/lists/oss-security/2010/12/22/3

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://secunia.com/advisories/42658

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42807

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.h-online.com/open/news/item/When-a-smart-card-can-root-your-computer-1154829.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:011

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/45435

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0009

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0109

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/ubuntu/+source/opensc/+bug/692483

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=664831

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://www.opensc-project.org/opensc/changeset/4913

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.