Race Condition Vulnerability in Mono's FastCopy Optimization for Moonlight

CVE-2011-0990

Summary

A race condition in the FastCopy optimization of the Array.Copy method in Mono can be exploited by remote attackers through specially crafted media files. This vulnerability allows a thread to alter internal data structures post-type check but pre-copy action, potentially leading to a buffer overflow. As a consequence, it could cause a denial of service by crashing the plugin or compromising the internal state of the security manager.

References