Description
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.
References
- 40758 vdb-entry
- DSA-2059 vendor-advisory
- 40239 third-party-advisory
- FEDORA-2010-10764 vendor-advisory
- 40140 third-party-advisory
- ADV-2010-1427 vdb-entry
- FEDORA-2010-9995 vendor-advisory
- http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4334
- ADV-2010-1508 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=596426
- FEDORA-2010-10014 vendor-advisory