CVE:CVE-2008-3972
CNNVD:CNNVD-200809-155
OpenSC是一款开源的智能卡工具和中间件。
OpenSC 0.11.6的之前版本中的pkcs15-tool没有对smart card应用安全更新，除非该card的标签与"OpenSC"字符串相匹配，攻击者可能利用这些漏洞。
solution:Upgrade opensc-project opensc to a higher version than 0.11.5,0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8.0,0.8.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4,and avoid the version (,0.11.5],0.4.0,0.5.0,0.6.0,0.6.1,0.7.0,0.8.0,0.8.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.10.0,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.3:pre3,0.11.4