CVE-2010-4531

Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.

• CWE-119

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607781Patch
• http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow_2010-12-13.pdfPatch
• http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004923.htmlPatch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053079.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053095.html
• http://secunia.com/advisories/42912Vendor Advisory
• http://secunia.com/advisories/43112
• http://www.debian.org/security/2011/dsa-2156
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:015
• http://www.openwall.com/lists/oss-security/2010/12/22/7Patch
• http://www.openwall.com/lists/oss-security/2011/01/03/3Patch
• http://www.securityfocus.com/bid/45450
• http://www.vupen.com/english/advisories/2010/3264Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0101Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0180
• http://www.vupen.com/english/advisories/2011/0256
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4531Patch
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607781Patch
• http://labs.mwrinfosecurity.com/files/Advisories/mwri_pcsc-atr-handler-buffer-overflow_2010-12-13.pdfPatch
• http://lists.alioth.debian.org/pipermail/pcsclite-cvs-commit/2010-November/004923.htmlPatch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053079.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053095.html
• http://secunia.com/advisories/42912Vendor Advisory
• http://secunia.com/advisories/43112
• http://www.debian.org/security/2011/dsa-2156
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:015
• http://www.openwall.com/lists/oss-security/2010/12/22/7Patch
• http://www.openwall.com/lists/oss-security/2011/01/03/3Patch
• http://www.securityfocus.com/bid/45450
• http://www.vupen.com/english/advisories/2010/3264Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0101Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0180
• http://www.vupen.com/english/advisories/2011/0256
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4531Patch

Published

Jan 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4525Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm…
• CVE-2010-4526Race condition in the sctp_icmp_proto_unreachable function i…
• CVE-2010-4527The load_mixer_volumes function in sound/oss/soundcard.c in …
• CVE-2010-4528directconn.c in the MSN protocol plugin in libpurple 2.7.6 t…
• CVE-2010-4529Integer underflow in the irda_getsockopt function in net/ird…
• CVE-2010-4530Signedness error in ccid_serial.c in libccid in the USB Chip…
• CVE-2010-4532offlineimap before 6.3.2 does not check for SSL server certi…5.9
• CVE-2010-4533offlineimap before 6.3.4 added support for SSL server certif…9.8
• CVE-2010-4534The administrative interface in django.contrib.admin in Djan…
• CVE-2010-4535The password reset functionality in django.contrib.auth in D…
• CVE-2010-4536Multiple cross-site scripting (XSS) vulnerabilities in KSES,…
• CVE-2010-4537Unspecified vulnerability in CrawlTrack before 3.2.7, when a…