Lucene search
Ubuntu.comUB:CVE-2011-0992HistoryApr 13, 2011 - 12:00 a.m.
CVE-2011-0992
2011-04-1300:00:00
ubuntu.com
ubuntu.com
6
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.023 Low
EPSS
Percentile
89.7%
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or
3.x before 3.99.3 is used, allows remote attackers to cause a denial of
service (plugin crash) or obtain sensitive information via vectors related
to member data in a resurrected MonoThread instance.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | upstream note: The bug (and fix) is in mono source code but can only be exploited (by untrusted applications) when used by Moonlight. Setting severity to negligible. |
Related
cve
cve
CVE-2011-0992
2011-04-13 21:55:00
debiancve
debiancve
CVE-2011-0992
2011-04-13 21:55:00
nvd
nvd
CVE-2011-0992
2011-04-13 21:55:00
prion
prion
Design/Logic Flaw
2011-04-13 21:55:00
cvelist
cvelist
CVE-2011-0992
2011-04-13 21:00:00
nessus
nessus
openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)
2014-06-13 00:00:00
openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)
2014-06-13 00:00:00
SuSE 11.1 Security Update : moonlight (SAT Patch Number 4246)
2011-04-07 00:00:00
ubuntu
ubuntu
Mono vulnerabilities
2015-03-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2547-1)
2015-03-25 00:00:00
Gentoo Security Advisory GLSA 201206-13 (mono mono-debugger)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201206-13 (mono mono-debugger)
2012-08-10 00:00:00
gentoo
gentoo
Mono: Multiple vulnerabilities
2012-06-21 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.023 Low
EPSS
Percentile
89.7%
Related for UB:CVE-2011-0992