CVE:CVE-2010-4523
CNNVD:CNNVD-201101-017
OpenSC是一款开源的智能卡工具和中间件。
OpenSC 0.11.13及之前版本中存在多个基于栈的缓冲区溢出漏洞。附近攻击者可以借助位于智能卡中的超长序列数字段执行任意代码。该漏洞与(1)card-acos5.c文件，(2)card-atrust-acos.c文件，以及(3)card-starcos.c文件有关。
solution:Upgrade opensc-project opensc to a higher version than 0.11.13,0.3.2,0.3.5,0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8,0.8.0,0.8.0.0,0.8.1,0.9,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7:b,0.9.7:d,0.9.8,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4,0.11.5,0.11.6,0.11.7,0.11.8,0.11.9,0.11.10,0.11.11,0.11.12,and avoid the version (,0.11.13],0.3.2,0.3.5,0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8,0.8.0,0.8.0.0,0.8.1,0.9,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7:b,0.9.7:d,0.9.8,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4,0.11.5,0.11.6,0.11.7,0.11.8,0.11.9,0.11.10,0.11.11,0.11.12