Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2009-4901

The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407.

  • Published: Jun 18, 2010
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-4901
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
muscle / pcsc-lite 1.2.9-beta7 1.2.9-beta7.x
muscle / pcsc-lite 1.4.3 1.4.3.x
muscle / pcsc-lite 1.2.0-rc2 1.2.0-rc2.x
muscle / pcsc-lite 1.3.1 1.3.1.x
muscle / pcsc-lite 1.2.9-beta6 1.2.9-beta6.x
muscle / pcsc-lite 1.2.9-beta1 1.2.9-beta1.x
muscle / pcsc-lite 1.1.2-beta5 1.1.2-beta5.x
muscle / pcsc-lite 1.2.9-beta8 1.2.9-beta8.x
muscle / pcsc-lite 1.2.9-beta2 1.2.9-beta2.x
muscle / pcsc-lite 1.2.9-beta5 1.2.9-beta5.x
muscle / pcsc-lite 1.5.1 1.5.1.x
muscle / pcsc-lite 1.1.2-beta3 1.1.2-beta3.x
muscle / pcsc-lite 1.3.2 1.3.2.x
muscle / pcsc-lite 1.4.102 1.4.102.x
muscle / pcsc-lite 1.4.100 1.4.100.x
muscle / pcsc-lite 1.2.9-beta10 1.2.9-beta10.x
muscle / pcsc-lite 1.4.1 1.4.1.x
muscle / pcsc-lite 1.3.0 1.3.0.x
muscle / pcsc-lite 1.4.101 1.4.101.x
muscle / pcsc-lite 1.4.0 1.4.0.x
muscle / pcsc-lite 1.2.9-beta3 1.2.9-beta3.x
muscle / pcsc-lite 1.2.0-rc3 1.2.0-rc3.x
muscle / pcsc-lite 1.2.0 1.2.0.x
muscle / pcsc-lite 1.4.2 1.4.2.x
muscle / pcsc-lite 1.1.2-beta2 1.1.2-beta2.x
muscle / pcsc-lite - 1.5.3.x
muscle / pcsc-lite 1.4.99 1.4.99.x
muscle / pcsc-lite 1.2.9-beta9 1.2.9-beta9.x
muscle / pcsc-lite 1.3.3 1.3.3.x
muscle / pcsc-lite 1.2.0-rc1 1.2.0-rc1.x
muscle / pcsc-lite 1.4.4 1.4.4.x
muscle / pcsc-lite 1.2.9-beta4 1.2.9-beta4.x
muscle / pcsc-lite 1.5.0 1.5.0.x
muscle / pcsc-lite 1.5.2 1.5.2.x
muscle / pcsc-lite 1.1.2-beta4 1.1.2-beta4.x