CVEvulnerability

CVE-2010-4523

7.2 HIGH Published 2011-01-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Affected configurations

• opensc-project opensc (<= 0.11.13) • opensc-project opensc 0.3.2 • opensc-project opensc 0.3.5 • opensc-project opensc 0.4.0 • opensc-project opensc 0.5.0 • opensc-project opensc 0.6.0 • opensc-project opensc 0.6.1 • opensc-project opensc 0.7.0 • opensc-project opensc 0.8 • opensc-project opensc 0.8.0 • opensc-project opensc 0.8.0.0 • opensc-project opensc 0.8.1 • opensc-project opensc 0.9 • opensc-project opensc 0.9.2 • opensc-project opensc 0.9.3 • opensc-project opensc 0.9.4 • opensc-project opensc 0.9.5 • opensc-project opensc 0.9.6 • opensc-project opensc 0.9.7 • opensc-project opensc 0.9.8 • opensc-project opensc 0.10.0 • opensc-project opensc 0.10.1 • opensc-project opensc 0.11.0 • opensc-project opensc 0.11.1 • opensc-project opensc 0.11.2 • opensc-project opensc 0.11.3 • opensc-project opensc 0.11.4 • opensc-project opensc 0.11.5 • opensc-project opensc 0.11.6 • opensc-project opensc 0.11.7 • opensc-project opensc 0.11.8 • opensc-project opensc 0.11.9 • opensc-project opensc 0.11.10 • opensc-project opensc 0.11.11 • opensc-project opensc 0.11.12

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References