Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities

Bugtraq ID:	47208
Class:	Unknown
CVE:	CVE-2011-0989 CVE-2011-0990 CVE-2011-0991 CVE-2011-0992
Remote:	Yes
Local:	No
Published:	Apr 06 2011 12:00AM
Updated:	Apr 13 2015 09:10PM
Credit:	Sebastien Pouliot, Rodrigo Kumpera
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise 11 SP1 S.u.S.E. openSUSE 11.4 S.u.S.E. openSUSE 11.3 Mono Moonlight 2.3 1 Mono Moonlight 3.99 Mono Moonlight 3 preview 10 Mono Moonlight 2.4 Mono Moonlight 0 Gentoo Linux
Not Vulnerable:	Mono Moonlight 3.99.3 Mono Moonlight 2.4.1

Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities

Moonlight is prone to multiple security vulnerabilities, including security-bypass, memory-corruption, and information-disclosure issues.

An attacker may exploit these issues to execute arbitrary code with the privileges of the user running an affected application, bypass security restrictions and perform unauthorized actions, or obtain sensitive information. Other attacks may also be possible.

Versions prior to Moonlight 2.4.1 and 3.99.3 are vulnerable.

Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities

Solution:
Updates are available; please see the references for more information.

Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities

References:

• Bug 667077 - VUL-0: Moonlight Multiple Vulnerabilities (Sebastien Pouliot)
  
• Moonlight Homepage (Mono)
  
• Moonlight Project Homepage (Mono Project)
  
• Moonlight release 2.4.1 with security fixes (Marcus Meissner)