CVE

Id
46838  
CVE No.
CVE-2010-4254  
Status
Candidate  
Description
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
511872 46838 CVE-2010-4254 EXPLOIT-DB:15974  View
511873 46838 CVE-2010-4254 URL:http://www.exploit-db.com/exploits/15974  View
511874 46838 CVE-2010-4254 CONFIRM:http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability  View
511875 46838 CVE-2010-4254 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=654136  View
511876 46838 CVE-2010-4254 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=655847  View
511877 46838 CVE-2010-4254 CONFIRM:https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399  View
511878 46838 CVE-2010-4254 CONFIRM:https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358  View
511879 46838 CVE-2010-4254 CONFIRM:https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac  View
511880 46838 CVE-2010-4254 SUSE:SUSE-SR:2011:001  View
511881 46838 CVE-2010-4254 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html  View
511882 46838 CVE-2010-4254 SUSE:SUSE-SR:2010:024  View
511883 46838 CVE-2010-4254 URL:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html  View
511884 46838 CVE-2010-4254 BID:45051  View
511885 46838 CVE-2010-4254 URL:http://www.securityfocus.com/bid/45051  View
511886 46838 CVE-2010-4254 SECUNIA:42373  View
511887 46838 CVE-2010-4254 URL:http://secunia.com/advisories/42373  View
511888 46838 CVE-2010-4254 SECUNIA:42877  View
511889 46838 CVE-2010-4254 URL:http://secunia.com/advisories/42877  View
511890 46838 CVE-2010-4254 VUPEN:ADV-2011-0076  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36990 JVNDB-2010-002770 Linux kernel の kernel/exit.c 内にある do_exit 関数における権限を取得される脆弱性 Linux kernel の kernel/exit.c 内にある do_exit 関数は、KERNEL_DS get_fs 値を適切に処理しないため、access_ok の制限を回避され、任意のカーネルメモリのロケーションを上書きされたり、あるいは、権限を取得される脆弱性が存在します。 CVE-2010-4258 46838 6.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002770.html  View