Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pcsc-lite | Muscle | 1.5.3 (including) | 1.5.3 (including) |
| Ccid | Ubuntu | artful | * |
| Ccid | Ubuntu | dapper | * |
| Ccid | Ubuntu | hardy | * |
| Ccid | Ubuntu | karmic | * |
| Ccid | Ubuntu | lucid | * |
| Ccid | Ubuntu | maverick | * |
| Ccid | Ubuntu | natty | * |
| Ccid | Ubuntu | oneiric | * |
| Ccid | Ubuntu | precise | * |
| Ccid | Ubuntu | quantal | * |
| Ccid | Ubuntu | raring | * |
| Ccid | Ubuntu | saucy | * |
| Ccid | Ubuntu | upstream | * |
| Ccid | Ubuntu | utopic | * |
| Ccid | Ubuntu | vivid | * |
| Ccid | Ubuntu | wily | * |
| Ccid | Ubuntu | yakkety | * |
| Ccid | Ubuntu | zesty | * |
| Red Hat Enterprise Linux 5 | RedHat | ccid-0:1.3.8-2.el5 | * |
| Red Hat Enterprise Linux 6 | RedHat | ccid-0:1.3.9-6.el6 | * |