Moonlight@3.0 Security Vulnerabilities and Issues — Moonlight@3.0 CVE List

Lucene search

NovellMoonlight3.0

4 matches found

CVE•added 2011/04/13 9:55 p.m.•54 views

CVE-2011-0992

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.

5.8CVSS7.2AI score0.01346EPSS

CVE•added 2011/04/13 9:55 p.m.•53 views

CVE-2011-0990

Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or c...

5.8CVSS7AI score0.01167EPSS

CVE•added 2011/04/13 9:55 p.m.•50 views

CVE-2011-0989

The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service (plugin crash) or cor...

5.8CVSS6.5AI score0.00973EPSS

CVE•added 2011/04/13 9:55 p.m.•48 views

CVE-2011-0991

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.

6.8CVSS7.4AI score0.02709EPSS