CVE-2010-4254
Last modified
CVE-2010-4254 is a vulnerability of currently unknown severity. Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.. EPSS estimates a 13.65% chance of exploitation in the next 30 days.
Description
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mono | Mono | All versions |
| Novell | Moonlight | <= 2.3.0 |
| Novell | Moonlight | 2.99.0 |
| Novell | Moonlight | 2.99.1 |
| Novell | Moonlight | 2.99.2 |
| Novell | Moonlight | 2.99.7 |
| Novell | Moonlight | 2.99.9 |
References
- http://secunia.com/advisories/42373Vendor Advisory
- http://secunia.com/advisories/42373Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4254?
How severe is CVE-2010-4254?
How do I fix CVE-2010-4254?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4248Race condition in the __exit_signal function in kernel/exit.…
- CVE-2010-4249The wait_for_unix_gc function in net/unix/garbage.c in the L…
- CVE-2010-4250Memory leak in the inotify_init1 function in fs/notify/inoti…
- CVE-2010-4251The socket implementation in net/core/sock.c in the Linux ke…7.5
- CVE-2010-4252OpenSSL before 1.0.0c, when J-PAKE is enabled, does not prop…
- CVE-2010-4253Heap-based buffer overflow in Impress in OpenOffice.org (OOo…
- CVE-2010-4255The fixup_page_fault function in arch/x86/traps.c in Xen 4.0…
- CVE-2010-4256The pipe_fcntl function in fs/pipe.c in the Linux kernel bef…
- CVE-2010-4257SQL injection vulnerability in the do_trackbacks function in…
- CVE-2010-4258The do_exit function in kernel/exit.c in the Linux kernel be…
- CVE-2010-4259Stack-based buffer overflow in FontForge 20100501 allows rem…
- CVE-2010-4260Multiple unspecified vulnerabilities in pdf.c in libclamav i…
Are you affected by CVE-2010-4254?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST