deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2302
Published: 2010-06-15
Description: Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953.  NOTE: this might overlap CVE-2010-1771.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=44740; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2303
Published: 2010-06-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-1772.  Reason: This candidate is a duplicate of CVE-2010-1772.  Notes: All CVE users should reference CVE-2010-1772 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-2304
Published: 2010-06-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-1773.  Reason: This candidate is a duplicate of CVE-2010-1773.  Notes: All CVE users should reference CVE-2010-1773 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-1932
Published: 2010-06-16
Description: Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40141; http://www.coresecurity.com/content/XnView-MBM-Processing-Heap-Overflow; http://www.securityfocus.com/bid/40852
CVE: CVE-2010-2070
Published: 2010-06-16
Description: arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on BE by modifying the user mask of the PSR," as demonstrated via exploitation of CVE-2006-0742.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/65541; http://secunia.com/advisories/43315; http://www.openwall.com/lists/oss-security/2010/06/10/2
CVE: CVE-2010-2071
Published: 2010-06-16
Description: The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=2f26afba; http://lkml.org/lkml/2010/5/17/544; http://www.openwall.com/lists/oss-security/2010/06/11/3
CVE: CVE-2010-2072
Published: 2010-06-16
Description: Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information.
CVSS Score: 3.6 (LOW)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585773; http://www.openwall.com/lists/oss-security/2010/06/13/1; http://www.securityfocus.com/bid/40842
CVE: CVE-2010-2073
Published: 2010-06-16
Description: auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585776; http://www.openwall.com/lists/oss-security/2010/06/13/2; http://www.securityfocus.com/bid/40839
CVE: CVE-2010-2074
Published: 2010-06-16
Description: istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044401.html; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://osvdb.org/65538
CVE: CVE-2010-2305
Published: 2010-06-16
Description: Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/65539; http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/; http://www.exploit-db.com/exploits/13834
CVE: CVE-2010-2306
Published: 2010-06-16
Description: The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://osvdb.org/65470; http://secunia.com/advisories/40143; http://www.securityfocus.com/archive/1/511792/100/0/threaded
CVE: CVE-2010-2307
Published: 2010-06-16
Description: Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/40054; http://www.exploit-db.com/exploits/12865; http://www.osvdb.org/65249
CVE: CVE-2010-2308
Published: 2010-06-16
Description: Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
CVSS Score: 7.2 (HIGH)
References: http://dvlabs.tippingpoint.com/advisory/TPTI-10-03; http://secunia.com/advisories/40085; http://www.securityfocus.com/archive/1/511773/100/0/threaded
CVE: CVE-2010-2309
Published: 2010-06-16
Description: Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/39988; http://www.exploit-db.com/exploits/13735; http://www.securityfocus.com/bid/40489
CVE: CVE-2010-2310
Published: 2010-06-16
Description: SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/65540; http://www.exploit-db.com/exploits/13836; http://www.securityfocus.com/bid/40824
CVE: CVE-2010-2311
Published: 2010-06-16
Description: Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/65482; http://secunia.com/advisories/40216; http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-049-power-tab-editor-v1-7-build-80-buffer-overflow/
CVE: CVE-2010-2312
Published: 2010-06-16
Description: SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65431; http://secunia.com/advisories/40162; http://www.exploit-db.com/exploits/13784
CVE: CVE-2008-4389
Published: 2010-06-17
Description: Symantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/40233; http://www.kb.cert.org/vuls/id/221257; http://www.securityfocus.com/bid/40611
CVE: CVE-2010-0540
Published: 2010-06-17
Description: Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://cups.org/articles.php?L596; http://cups.org/str.php?L3498; http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
CVE: CVE-2010-0541
Published: 2010-06-17
Description: Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://support.apple.com/kb/HT4188
CVE: CVE-2010-0543
Published: 2010-06-17
Description: ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-0545
Published: 2010-06-17
Description: The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-0546
Published: 2010-06-17
Description: Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1373
Published: 2010-06-17
Description: Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1374
Published: 2010-06-17
Description: Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1375
Published: 2010-06-17
Description: NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1376
Published: 2010-06-17
Description: Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) afp, (2) cifs, or (3) smb URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-134
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1377
Published: 2010-06-17
Description: Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1379
Published: 2010-06-17
Description: Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service (printing failure) by deploying a printing device that has a Unicode character in its printing-service name.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1380
Published: 2010-06-17
Description: Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page sizes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1381
Published: 2010-06-17
Description: The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links.  NOTE: this might overlap CVE-2010-0926.
CVSS Score: 3.5 (LOW)
CWE: CWE-16
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1382
Published: 2010-06-17
Description: Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML via crafted Wiki content, related to lack of a charset field.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://secunia.com/advisories/40220; http://securitytracker.com/id?1024103
CVE: CVE-2010-1411
Published: 2010-06-17
Description: Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043769.html
CVE: CVE-2010-1635
Published: 2010-06-17
Description: The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
CVSS Score: 5.0 (MEDIUM)
References: http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12d; http://samba.org/samba/history/samba-3.4.8.html; http://samba.org/samba/history/samba-3.5.2.html
CVE: CVE-2010-1642
Published: 2010-06-17
Description: The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9280051bfba337458722fb157f3082f93cbd9f2b; http://samba.org/samba/history/samba-3.4.8.html; http://samba.org/samba/history/samba-3.5.2.html
CVE: CVE-2010-1748
Published: 2010-06-17
Description: The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://cups.org/articles.php?L596; http://cups.org/str.php?L3577; http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
CVE: CVE-2010-1964
Published: 2010-06-17
Description: Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/65552; http://seclists.org/bugtraq/2010/Jun/152; http://securityreason.com/securityalert/8155
CVE: CVE-2010-2063
Published: 2010-06-17
Description: Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873; http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
CVE: CVE-2010-2313
Published: 2010-06-17
Description: Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/65084; http://packetstormsecurity.org/1006-exploits/simm-lfi.txt; http://secunia.com/advisories/40009
CVE: CVE-2010-2314
Published: 2010-06-17
Description: PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PLUGINS parameter. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://packetstormsecurity.org/1005-exploits/nucleustwitter-rfi.txt; http://secunia.com/advisories/39997; http://www.exploit-db.com/exploits/12790/
CVE: CVE-2010-2315
Published: 2010-06-17
Description: PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/12855/; http://www.securityfocus.com/bid/40546; https://exchange.xforce.ibmcloud.com/vulnerabilities/59127
CVE: CVE-2010-2316
Published: 2010-06-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, different vectors than CVE-2007-3137.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ariko-security.com/june2010/audyt_bezpieczenstwa_692.html; http://www.exploit-db.com/exploits/13739; http://www.securityfocus.com/bid/40593
CVE: CVE-2010-2317
Published: 2010-06-17
Description: Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to printpage.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.ariko-security.com/june2010/audyt_bezpieczenstwa_692.html; http://www.exploit-db.com/exploits/13739/; http://www.securityfocus.com/bid/40591
CVE: CVE-2010-2318
Published: 2010-06-17
Description: Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/phpcityportal-xss.txt; http://www.securityfocus.com/bid/40532; http://packetstormsecurity.org/1001-exploits/phpcityportal-xss.txt
CVE: CVE-2010-2319
Published: 2010-06-17
Description: SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/13749/; http://www.securityfocus.com/bid/40592; http://www.vupen.com/english/advisories/2010/1357
CVE: CVE-2009-4901
Published: 2010-06-18
Description: The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407.
CVSS Score: 2.1 (LOW)
CWE: CWE-119
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html
CVE: CVE-2009-4902
Published: 2010-06-18
Description: Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html