CVE-2011-0992

Mono with Moonlight 2.x < 2.4.1 or 3.x < 3.99.3 - Use-After-Free in MonoThread Member Data

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66627
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=678515
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47208
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/04/06/14
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44002
Vendor Advisory x_refsource_confirm
http://www.mono-project.com/Vulnerabilities
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44076
Mailing List mailing-list x_refsource_mlist
http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0904

Scores

EPSS 0.0135
EPSS Percentile 80.3%

Details

CWE
CWE-399
Status published
Products (7)
mono/mono
novell/moonlight 2.0
novell/moonlight 2.3.0
novell/moonlight 2.4
novell/moonlight 2.31
novell/moonlight 3.0
novell/moonlight 3.99
Published Apr 13, 2011
Tracked Since Feb 18, 2026