Buffer overflow in Opensc-Project Opensc

CVE-2010-4523

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Vulnerability class: Buffer Overflow

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References