Use-After-Free Vulnerability in Moonlight by Novell
CVE-2011-0991

Currently unrated

Key Information:

Vendor

Novell
Status
Moonlight
Mono
Vendor
CVE Published:
13 April 2011

What is CVE-2011-0991?

The use-after-free vulnerability in Mono's Moonlight allows attackers to manipulate DynamicMethod instances, potentially leading to denial of service and other undefined impacts. By exploiting the flaws associated with finalizing and resurrecting instances, malicious entities can interfere with the application's memory management, jeopardizing operational integrity.

References

https://bugzilla.novell.com/show_bug.cgi?id=660422
x_refsource_CONFIRM
https://github.com/mono/mono/commit/89d1455a80ef13cddee5d...
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/66626
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.