CVE-2010-4254

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
• lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
• secunia.com/advisories/42373 · Vendor Advisory
• secunia.com/advisories/42877
• exploit-db.com/exploits/15974
• mono-project.com/Vulnerabilities
• securityfocus.com/bid/45051
• vupen.com/english/advisories/2011/0076
• bugzilla.novell.com/show_bug.cgi
• bugzilla.novell.com/show_bug.cgi
• mono/mono commit 4905ef1 · Patch
• mono/mono commit 65292a6 · Patch
• mono/mono commit cf1ec14

moonlight のその他の脆弱性

• CVE-2011-0992中 5.8Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia…
• CVE-2011-0991中 6.8Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia…
• CVE-2011-0990中 5.8Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x bef…
• CVE-2011-0989中 5.8The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does no…