CVE-2011-0990

Upstream information

CVE-2011-0990 at MITRE

Description

Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action.

---

SUSE information

CVSS v2 Scores

	National Vulnerability Database
Base Score	5.76
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	None
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 667077 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2011:007, published Tue, 19 Apr 2011 12:00:00 +0000
• openSUSE-SU-2011:0313-1, published Fri, 8 Apr 2011 13:08:26 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 11 SP1	libmoon0 >= 2.4.1-0.5.1 moonlight-plugin >= 2.4.1-0.5.1 moonlight-tools >= 2.4.1-0.5.1	Builds SAT Patch Nr: 4246
openSUSE 11.3	libmoon0-debuginfo >= 2.4.1-0.2.1 moonlight-debugsource >= 2.4.1-0.2.1 moonlight-plugin-debuginfo >= 2.4.1-0.2.1
openSUSE 11.3	libmoon-devel >= 2.4.1-0.2.1 libmoon0 >= 2.4.1-0.2.1 moonlight-desktop >= 2.4.1-0.2.1 moonlight-desktop-devel >= 2.4.1-0.2.1 moonlight-plugin >= 2.4.1-0.2.1 moonlight-tools >= 2.4.1-0.2.1 moonlight-web-devel >= 2.4.1-0.2.1
openSUSE 11.4	libmoon-devel >= 2.4.1-0.3.1 libmoon0 >= 2.4.1-0.3.1 moonlight-desktop >= 2.4.1-0.3.1 moonlight-desktop-devel >= 2.4.1-0.3.1 moonlight-plugin >= 2.4.1-0.3.1 moonlight-tools >= 2.4.1-0.3.1 moonlight-web-devel >= 2.4.1-0.3.1
openSUSE 11.4	libmoon-devel >= 2.4.1-0.3.1 libmoon0 >= 2.4.1-0.3.1 libmoon0-debuginfo >= 2.4.1-0.3.1 moonlight-debugsource >= 2.4.1-0.3.1 moonlight-desktop >= 2.4.1-0.3.1 moonlight-desktop-devel >= 2.4.1-0.3.1 moonlight-plugin >= 2.4.1-0.3.1 moonlight-plugin-debuginfo >= 2.4.1-0.3.1 moonlight-tools >= 2.4.1-0.3.1 moonlight-web-devel >= 2.4.1-0.3.1	Patchnames: libmoon-devel