OpenSC Stack-Buffer-Overflow Vulnerability in Oberthur Card Driver

A stack-buffer-overflow vulnerability has been identified in the OpenSC smart card tools and middleware, specifically within the card-oberthur driver, prior to version 0.27.0. This vulnerability allows an attacker with physical access to the computer to cause a write overflow by using a crafted USB device or smart card that delivers specially tailored responses to the APDUs. The issue has been patched in version 0.27.0.

Impact

Exploitation of this vulnerability could lead to a stack-buffer-overflow write, allowing for potential crashes, data corruption, or unexpected behavior in applications using OpenSC.

Reproduction

The vulnerability can be reproduced by using a crafted USB device or smart card that responds to APDU commands in a way that exceeds the expected data length. This can be done by manipulating the APDU responses to include more data than the driver can safely handle, causing a buffer overflow on the stack.

Remediation

Users can upgrade to OpenSC version 0.27.0 or later to address this vulnerability.