Oval Definition:oval:org.opensuse.security:def:20110990
Revision Date:2015-11-16Version:1
Title:CVE-2011-0990
Description:
Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2011-0990
Platform(s):openSUSE 11.3
openSUSE 11.4
SUSE Linux Enterprise Desktop 11 SP1
Product(s):
Definition Synopsis
  • Release Information
  • sled11-sp1 is installed
  • AND
  • libmoon0 less than 2.4.1-0.5.1
  • OR moonlight-plugin less than 2.4.1-0.5.1
  • OR moonlight-tools less than 2.4.1-0.5.1
  • OR Package Information
  • suse113 is installed
  • libmoon-devel less than 2.4.1-0.2.1
  • OR libmoon0 less than 2.4.1-0.2.1
  • OR moonlight-desktop-devel less than 2.4.1-0.2.1
  • OR moonlight-desktop less than 2.4.1-0.2.1
  • OR moonlight-plugin less than 2.4.1-0.2.1
  • OR moonlight-tools less than 2.4.1-0.2.1
  • OR moonlight-web-devel less than 2.4.1-0.2.1
  • OR
  • suse114 is installed
  • libmoon-devel less than 2.4.1-0.3.1
  • OR libmoon0 less than 2.4.1-0.3.1
  • OR moonlight-desktop-devel less than 2.4.1-0.3.1
  • OR moonlight-desktop less than 2.4.1-0.3.1
  • OR moonlight-plugin less than 2.4.1-0.3.1
  • OR moonlight-tools less than 2.4.1-0.3.1
  • OR moonlight-web-devel less than 2.4.1-0.3.1
    • BACK