CVE-2011-0992: novell moonlight Resource Management Errors

EPSS trend

Probability

2.69%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.69% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

exchange.xforce.ibmcloud.com/vulnerabilities/66627VDB EntryX Refsource XF
bugzilla.novell.com/show_bug.cgi?id=678515X Refsource CONFIRM
bugzilla.novell.com/show_bug.cgi?id=667077X Refsource CONFIRMPatch
www.securityfocus.com/bid/47208VDB EntryX Refsource BID
openwall.com/lists/oss-security/2011/04/06/14Mailing ListX Refsource MLISTPatch
secunia.com/advisories/44002Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mono-project.com/VulnerabilitiesX Refsource CONFIRMVendor Advisory
bugzilla.redhat.com/show_bug.cgi?id=694933X Refsource CONFIRMPatch
github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91X Refsource CONFIRMPatch
secunia.com/advisories/44076Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 15 references

lists.opensuse.org/opensuse-updates/2011-04/msg00024.htmlMailing ListX Refsource MLIST
www.vupen.com/english/advisories/2011/0904VDB EntryX Refsource VUPENVendor Advisory
ubuntu.com/security/CVE-2011-0992REPORT
ubuntu.com/security/notices/USN-2547-1Advisory
www.cve.org/CVERecord?id=CVE-2011-0992REPORT

Related vulnerabilities

CVE-2011-0991chainguardmono+12.93%15y ago13-04-2011 21:00Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.CVE-2011-0989chainguardmono+12.69%15y ago13-04-2011 21:00The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file, as demonstrated by modifying a C# struct.CVE-2011-0990chainguardmono+12.16%15y ago13-04-2011 21:00Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action.CVE-2010-4254chainguardmono+113.65%15y ago03-12-2010 20:00Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

All vulnerabilities inmoonlight

CVE-2011-0992: novell moonlight Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References