what you don't know can hurt you
Showing 1 - 1 of 1 RSS Feed

Files

Mandriva Linux Security Advisory 2010-189
Posted Sep 25, 2010
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-189 - The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407. Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted this vulnerability exists because of an incorrect fix for CVE-2010-0407. Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

tags | advisory, denial of service, overflow, local
systems | linux, mandriva
advisories | CVE-2009-4901, CVE-2009-4902, CVE-2010-0407
MD5 | 2e7ca757bece96413676fc2fb9399da9
Page 1 of 1
Back1Next

Top Authors In Last 30 Days

Recent News

News RSS Feed
No, You Don't Need A Burner Phone At A Hacking Conference
Posted Jul 18, 2019

tags | headline, hacker, privacy, phone, conference
Unofficial Telegram App Secretly Loads Malicious Sites
Posted Jul 17, 2019

tags | headline, malware, phone
Bluetooth Exploit Can Track And Identify Mobile Device Users
Posted Jul 17, 2019

tags | headline, privacy, wireless, spyware
Elon Musk Reveals Brain Hacking Plans
Posted Jul 17, 2019

tags | headline, hacker, science
JetBlue Bomb Scare Set Off With Apple AirDrop
Posted Jul 17, 2019

tags | headline, apple, terror
MyDashWallet Compromised For Two Months, Wallet Keys Taken
Posted Jul 16, 2019

tags | headline, cybercrime, data loss, fraud, cryptography
Office 365 Declared Illegal In German Schools Due To Privacy Risks
Posted Jul 16, 2019

tags | headline, government, privacy, microsoft, flaw, germany
Amadeus Airline Check-In Bug Exposed Boarding Passes
Posted Jul 16, 2019

tags | headline, privacy, data loss, spyware, terror
Sprint Says Hackers Breached Customer Accounts Via Samsung Website
Posted Jul 16, 2019

tags | headline, hacker, privacy, phone, data loss, samsung
Bitcoin Drops 10 Percent As Scrutiny Grows
Posted Jul 15, 2019

tags | headline, bank, cryptography
View More News →
packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close