CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

13.65% chance of exploitation in the next 30 days, 96th percentile

Published

2010-12-03

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15974

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15974

References

• CVE Record
• NVD entry

Related

• CVE-2010-4250
• CVE-2010-4257
• CVE-2010-4249
• CVE-2010-4258
• CVE-2010-4246
• CVE-2010-4259