Threats tagged 'ghsa-8fgg-vqqx-jmfx'

A stack-based buffer overflow vulnerability exists in the Thales SafeNet Authentication Client (SAC) SIS token engine processing. This flaw can be triggered by a malicious physical or software-emulated smart card before authentication or PIN entry. Exploitation may lead to denial of service or potentially arbitrary code execution with the privileges of the affected process. The affected versions start from SAC 10.8 R7 through SAC 10.9 R3 GA (build 10.9.7449).