5.6 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
67.6%
It was discovered that the Mono System.Web library incorrectly filtered
certain error messages related to forbidden files. If a user were tricked
into opening a specially crafted URL, an attacker could possibly exploit
this to conduct cross-site scripting (XSS) attacks. (CVE-2012-3382)
It was discovered that the Mono System.Web library incorrectly handled the
EnableViewStateMac property. If a user were tricked into opening a
specially crafted URL, an attacker could possibly exploit this to conduct
cross-site scripting (XSS) attacks. This issue only affected Ubuntu
10.04 LTS. (CVE-2010-4159)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | libmono-system-web2.0-cil | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | libmono-2.0-1 | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | libmono-2.0-1-dbg | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | libmono-2.0-dev | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | libmono-profiler | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | mono-complete | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | mono-jay | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | mono-runtime | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | mono-runtime-dbg | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | mono-runtime-sgen | < 2.10.8.1-1ubuntu2.2 | UNKNOWN |