CVE-2010-4254: Input Validation
First published: Mon Dec 06 2010(Updated: )
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mono Mono | ||
| Novell Moonlight | <=2.3.0 | |
| Novell Moonlight | =2.99.0 | |
| Novell Moonlight | =2.99.1 | |
| Novell Moonlight | =2.99.2 | |
| Novell Moonlight | =2.99.7 | |
| Novell Moonlight | =2.99.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.novell.com/show_bug.cgi?id=654136
- https://bugzilla.novell.com/show_bug.cgi?id=655847
- https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358
- http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability
- https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac
- http://secunia.com/advisories/42373
- https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://www.vupen.com/english/advisories/2011/0076
- http://www.securityfocus.com/bid/45051
- http://secunia.com/advisories/42877
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://www.exploit-db.com/exploits/15974
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/mono
- canonical/mono mono
- vendor/novell
- canonical/novell moonlight
- version/novell moonlight/2.3.0
- version/novell moonlight/2.99.0
- version/novell moonlight/2.99.1
- version/novell moonlight/2.99.2
- version/novell moonlight/2.99.7
- version/novell moonlight/2.99.9