Buffer Overflow in ccid_card_vscard_handle_message Function in QEMU

CVE-2011-4111 · MEDIUM Severity

AV:A/AC:H/AU:N/C:C/I:C/A:C

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

Learn more about our Web Application Penetration Testing UK.