CVE - CVE-2010-4254

CVE-ID
CVE-2010-4254	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:15974 URL:http://www.exploit-db.com/exploits/15974 MISC:42373 URL:http://secunia.com/advisories/42373 MISC:42877 URL:http://secunia.com/advisories/42877 MISC:45051 URL:http://www.securityfocus.com/bid/45051 MISC:ADV-2011-0076 URL:~~http://www.vupen.com/english/advisories/2011/0076~~ (Obsolete source) MISC:SUSE-SR:2010:024 URL:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html MISC:SUSE-SR:2011:001 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html MISC:http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability URL:http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability MISC:https://bugzilla.novell.com/show_bug.cgi?id=654136 URL:https://bugzilla.novell.com/show_bug.cgi?id=654136 MISC:https://bugzilla.novell.com/show_bug.cgi?id=655847 URL:https://bugzilla.novell.com/show_bug.cgi?id=655847 MISC:https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399 URL:https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399 MISC:https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 URL:https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358 MISC:https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac URL:https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac
Assigning CNA
Red Hat, Inc.
Date Record Created
20101116	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20101116)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.