CVE-2010-4530 in PCSC-Lite
Summary
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/09/2010
Disclosure
01/18/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56095 | Muscle PCSC-Lite ccid_serial.c numeric error | 189 | Not defined | Not defined | CVE-2010-4530 |