NVD

Id
15528  
Name
CVE-2010-4254  
Description
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-06  
Modified Date
2011-02-02  
Seq
2010-4254  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87804 15528 CVE-2010-4254 SUSE-SR:2010:024  View
87805 15528 CVE-2010-4254 SUSE-SR:2011:001  View
87806 15528 CVE-2010-4254 15974  View
87807 15528 CVE-2010-4254 http://www.mono-project.com/Vulnerabilities#Moonlight_Generic_Constraints_Bypass_Vulnerability  View
87808 15528 CVE-2010-4254 45051  View
87809 15528 CVE-2010-4254 ADV-2011-0076  View
87810 15528 CVE-2010-4254 https://bugzilla.novell.com/show_bug.cgi?id=654136  View
87811 15528 CVE-2010-4254 https://bugzilla.novell.com/show_bug.cgi?id=655847  View
87812 15528 CVE-2010-4254 https://github.com/mono/mono/commit/4905ef1130feb26c3150b28b97e4a96752e0d399  View
87813 15528 CVE-2010-4254 https://github.com/mono/mono/commit/65292a69c837b8a5f7a392d34db63de592153358  View
87814 15528 CVE-2010-4254 https://github.com/mono/mono/commit/cf1ec146f7c6acdc6697032b3aaafc68ffacdcac  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37611 JVNDB-2010-003396 Mono における任意のコードを実行される脆弱性 Mono は、Moonlight が使用される際、汎用メソッドへの引数を適切に検証しないため、汎用の制約条件を回避される、および任意のコードを実行される脆弱性が存在します。 CVE-2010-4254 46834 CVE-2010-4254 15528 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003396.html 2010-11-16 2012-03-27 View