CVE-2010-4254

2010-12-0600:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.347 Low

EPSS

Percentile

97.1%

JSON

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used,
does not properly validate arguments to generic methods, which allows
remote attackers to bypass generic constraints, and possibly execute
arbitrary code, via a crafted method call.

Bugs

Notes

Author	Note
mdeslaur	upstream note: The bug (and fix) is in mono source code but can only be exploited (by untrusted applications) when used by Moonlight. Setting severity to negligile.