CVE-2011-0990: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service plugin crash or...

UBUNTU-CVE-2011-0992

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service plugin crash or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 4246)

Moonlight was prone to several security problems : - modification of read-only values via RuntimeHelpers.InitializeArray. CVE-2011-0989 - buffer overflow due to race condition in in Array.FastCopy. CVE-2011-0990 - use-after-free due to DynamicMethod resurrection. CVE-2011-0991 - information leak...

SuSE 11.1 Security Update : moonlight-plugin (SAT Patch Number 3606)

This update of moonlight does not allow abuse of mutable Strings to execute arbitrary code anymore. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrigh...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 3728)

Untrusted Moonlight apps could bypass constraints on methods which potentially allowed attackers to execute arbitrary code. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

Mono/Moonlight Generic Type Argument Local Privilege Escalation

Exploit for linux platform in category local exploits Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will compromise the affected application and possibly the...

Mono/Moonlight Local Privilege Escalation

Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will compromise the affected application and possibly the underlying computer. PoC: using System; using...

Mono/Moonlight Generic Type Argument - Privilege Escalation

Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/ https://www.securityfocus.com/bid/45051/info Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful...

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

CVE-2010-4254

CVE-2010-4254 affects Mono/Moonlight: when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, it does not properly validate arguments to generic methods, allowing remote attackers to bypass generic constraints and possibly execute arbitrary code via a crafted method call. Connected advi...

CVE-2010-4254: Improper Input Validation

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...