CVE-2011-0991: novell moonlight Resource Management Errors

EPSS trend

Probability

2.93%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 2.93% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

bugzilla.novell.com/show_bug.cgi?id=660422X Refsource CONFIRM
github.com/mono/mono/commit/89d1455a80ef13cddee5d79ec00c06055da3085cX Refsource CONFIRMPatch
exchange.xforce.ibmcloud.com/vulnerabilities/66626VDB EntryX Refsource XF
bugzilla.novell.com/show_bug.cgi?id=667077X Refsource CONFIRMPatch
www.securityfocus.com/bid/47208VDB EntryX Refsource BID
github.com/mono/mono/commit/3f8ee42b8c867d9a4c18c22657840d072cca5c3aX Refsource CONFIRMPatch
openwall.com/lists/oss-security/2011/04/06/14Mailing ListX Refsource MLISTPatch
secunia.com/advisories/44002Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mono-project.com/VulnerabilitiesX Refsource CONFIRMVendor Advisory
secunia.com/advisories/44076Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 13 references

lists.opensuse.org/opensuse-updates/2011-04/msg00024.htmlMailing ListX Refsource MLIST
www.vupen.com/english/advisories/2011/0904VDB EntryX Refsource VUPENVendor Advisory
github.com/mono/mono/commit/8eb1189099e02372fd45ca1c67230eccf1edddc0X Refsource CONFIRMPatch

Related vulnerabilities

CVE-2011-0989chainguardmono+12.69%15y ago13-04-2011 21:00The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file, as demonstrated by modifying a C# struct.CVE-2011-0990chainguardmono+12.16%15y ago13-04-2011 21:00Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action.CVE-2011-0992chainguardmono+22.69%15y ago13-04-2011 21:00Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.CVE-2010-4254chainguardmono+113.65%15y ago03-12-2010 20:00Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

All vulnerabilities inmoonlight

CVE-2011-0991: novell moonlight Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References