Redhat: >> Enterprise Linux Server Supplementary >> 6.1.z Security Vulnerabilities
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.
CVSS Score
6.8
EPSS Score
0.008
Published
2014-02-26