CVEvulnerability
CVE-2010-4254
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
Affected configurations
• mono mono
• novell moonlight (<= 2.3.0)
• novell moonlight 2.99.0
• novell moonlight 2.99.1
• novell moonlight 2.99.2
• novell moonlight 2.99.7
• novell moonlight 2.99.9
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/42373 Vendor Advisory
- http://secunia.com/advisories/42877 secunia.com
- http://www.exploit-db.com/exploits/15974 www.exploit-db.com
- http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability www.mono-project.com
- http://www.securityfocus.com/bid/45051 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0076 www.vupen.com
- https://bugzilla.novell.com/show_bug.cgi?id=654136 bugzilla.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=655847 bugzilla.novell.com
- https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399 Patch
- https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 Patch
- https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac Patch
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/42373 Vendor Advisory
- http://secunia.com/advisories/42877 secunia.com
- http://www.exploit-db.com/exploits/15974 www.exploit-db.com
- http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability www.mono-project.com
- http://www.securityfocus.com/bid/45051 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0076 www.vupen.com
- https://bugzilla.novell.com/show_bug.cgi?id=654136 bugzilla.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=655847 bugzilla.novell.com
- https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399 Patch
- https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 Patch
- https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac Patch