CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: multiple buffer overflows in the msgfunctiondemarshall function in winscard_svc.c in the pc/sc smart card daemon (aka pcscd) in muscle pcsc-lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-06-18
Last Modified Date: 2016-12-08