Buffer overflow in Muscle Pcsc-Lite
CVE-2010-4531
Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.4 (Medium). Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (40.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 40th percentile — 40.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Muscle Pcsc-Lite — versions 1.5.3
Weakness classification (CWE)
References
- lists.fedoraproject.org/pipermail/package-announce/2011-January/053095.html (vendor-advisory)
- www.vupen.com/english/advisories/2011/0180 (vdb-entry)
- lists.fedoraproject.org/pipermail/package-announce/2011-January/053079.html (vendor-advisory)
- labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow… (Patch)
- bugs.debian.org/cgi-bin/bugreport.cgi (Patch)
- www.openwall.com/lists/oss-security/2010/12/22/7 (mailing-list, Patch)
- bugzilla.redhat.com/show_bug.cgi (Patch)
- secunia.com/advisories/42912 (Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2011/0256 (vdb-entry)
- www.vupen.com/english/advisories/2011/0101 (vdb-entry, Vendor Advisory)