Novell Moonlight vulnerabilities

5 CVEs affecting Novell Moonlight, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0992, published 2011-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-4254, published 2010-12-06. High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days. Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and…
CVE-2011-0991, published 2011-04-13. Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days. Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
CVE-2011-0992, published 2011-04-13. Medium severity, CVSS 5.8. EPSS: 2.7% chance of exploitation in the next 30 days. Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information…
CVE-2011-0989, published 2011-04-13. Medium severity, CVSS 5.8. EPSS: 2.7% chance of exploitation in the next 30 days. The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote…
CVE-2011-0990, published 2011-04-13. Medium severity, CVSS 5.8. EPSS: 2.2% chance of exploitation in the next 30 days. Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a…