Lucene search

K
redhatRedHatRHSA-2010:0533
HistoryJul 14, 2010 - 12:00 a.m.

(RHSA-2010:0533) Moderate: pcsc-lite security update

2010-07-1400:00:00
access.redhat.com
9

EPSS

0

Percentile

10.1%

PC/SC Lite provides a Windows SCard compatible interface for communicating
with smart cards, smart card readers, and other security tokens.

Multiple buffer overflow flaws were discovered in the way the pcscd daemon,
a resource manager that coordinates communications with smart card readers
and smart cards connected to the system, handled client requests. A local
user could create a specially-crafted request that would cause the pcscd
daemon to crash or, possibly, execute arbitrary code. (CVE-2010-0407,
CVE-2009-4901)

Users of pcsc-lite should upgrade to these updated packages, which contain
a backported patch to correct these issues. After installing this update,
the pcscd daemon will be restarted automatically.