Stack-based Buffer Overflow in OpenSC Affects Smart Card Applications
CVE-2010-4523

Currently unrated

Key Information:

Vendor: Opensc-project
Status: Opensc
Vendor: CVE Published:; 7 January 2011

🔔 Create Opensc-project Vulnerability Alert

What is CVE-2010-4523?

A stack-based buffer overflow vulnerability exists in libopensc of OpenSC versions prior to 0.11.14. This allows physical attackers to exploit a long serial-number field from a smart card, specifically affecting card modules such as card-acos5.c, card-atrust-acos.c, and card-starcos.c. Successful exploitation can lead to the execution of arbitrary code, presenting significant security risks.

References

http://www.h-online.com/open/news/item/When-a-smart-card-...

x_refsource_MISC

http://secunia.com/advisories/43068

third-party-advisoryx_refsource_SECUNIA

http://www.vupen.com/english/advisories/2011/0212

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 7, 2011
Vulnerability Reserved
Dec 9, 2010

CVE-2010-4523 Data

JSON