Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2010-4531

Опубликовано: 18 янв. 2011
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.4

Описание

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

РелизСтатусПримечание
dapper

ignored

end of life
devel

not-affected

1.7.0-2ubuntu2
hardy

ignored

end of life
karmic

released

1.5.3-1ubuntu1.2
lucid

released

1.5.3-1ubuntu4.2
maverick

released

1.5.5-3ubuntu2.1
natty

not-affected

1.7.0-2ubuntu2
oneiric

not-affected

1.7.0-2ubuntu2
upstream

needs-triage

Показывать по

EPSS

Процентиль: 51%
0.00284
Низкий

4.4 Medium

CVSS2

Связанные уязвимости

redhat
больше 14 лет назад

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

nvd
больше 14 лет назад

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

debian
больше 14 лет назад

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer ...

github
больше 3 лет назад

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

oracle-oval
больше 12 лет назад

ELSA-2013-0525: pcsc-lite security and bug fix update (MODERATE)

EPSS

Процентиль: 51%
0.00284
Низкий

4.4 Medium

CVSS2