Описание
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | pcsc-lite | Affected | ||
| Red Hat Certificate System 7.3 | ant | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | avalon-logkit | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | axis | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | classpathx-jaf | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | classpathx-mail | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | geronimo-specs | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | jakarta-commons-modeler | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | log4j | Fixed | RHSA-2010:0602 | 04.08.2010 |
| Red Hat Certificate System 7.3 | mx4j | Fixed | RHSA-2010:0602 | 04.08.2010 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.2 Medium
CVSS2
Связанные уязвимости
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Multiple buffer overflows in the MSGFunctionDemarshall function in win ...
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Уязвимости операционной системы Debian GNU/Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
6.2 Medium
CVSS2