OpenSC Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities (Win)

  1. Network Vulnerabilities
  2. Buffer overflow
  3. OpenSC Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities (Win)
Summary
This host is installed with OpenSC and is prone to multiple buffer overflow vulnerabilities.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial of service conditions. Impact Level: Application
Solution
Upgrade to OpenSC 0.12.0 or later. For updates refer to http://www.opensc-project.org/opensc
Insight
The flaws are due to boundary errors in the 'acos_get_serialnr()', 'acos5_get_serialnr()', and 'starcos_get_serialnr()' functions when reading out the serial number of smart cards.
Affected
OpenSC version 0.11.13 and prior.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities