CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the msgfunctiondemarshall function in winscard_svc.c in the pc/sc smart card daemon (aka pcscd) in muscle pcsc-lite 1.5.4 and earlier might allow local users to gain privileges via crafted scard_control message data, which is improperly demarshalled.  note: this vulnerability exists because of an incorrect fix for cve-2010-0407.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-06-18
Last Modified Date: 2010-08-12