1. Home
  2. CVE Database
  3. CVE-2010-4254
HIGH · 7.5

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possib...

Vulnerability Description

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
MonoMonoAll versions
NovellMoonlight<= 2.3.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2010-4254?

CVE-2010-4254 is a vulnerability with a CVSS score of 7.5 (HIGH). Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possib...

How severe is CVE-2010-4254?

CVE-2010-4254 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-4254?

Check the references section above for vendor advisories and patch information. Affected products include: Mono Mono, Novell Moonlight.