CVE:CVE-2009-0368
CNNVD:CNNVD-200903-048
OpenSC是一个访问智能卡的函数和工具。支持加密操作，并实现例如邮件加密，身份验证安全应用的使用。                                   OpenSC之前的0.11.7版本允许附近的攻击者可以借助一个(1)低水平APDU指令或(2)调试工具，绕过预设的PIN要求并读取保密的数据对象，例如通过利用读取4601或4701文件。
solution:Upgrade opensc-project opensc to a higher version than 0.11.6,0.3.2,0.3.5,0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8,0.8.0,0.8.0.0,0.8.1,0.9,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7:b,0.9.7:d,0.9.8,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4,0.11.5,and avoid the version (,0.11.6],0.3.2,0.3.5,0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8,0.8.0,0.8.0.0,0.8.1,0.9,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7:b,0.9.7:d,0.9.8,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4,0.11.5