Moonlight Prior to 2.4.1/3.99.3 Multiple Security Vulnerabilities
3 Jul. 2012
Summary
Moonlight is prone to multiple security vulnerabilities, including security-bypass, memory-corruption, and information-disclosure issues.
Credit:
The original article can be found at: http://www.securityfocus.com/bid/47208
The information has been provided by Sebastien Pouliot, Rodrigo Kumpera.
Vulnerable Systems:
* Mono Moonlight 2.3 1 and prior
An attacker may exploit these issues to execute arbitrary code with the privileges of the user running an affected application, bypass security restrictions and perform unauthorized actions, or obtain sensitive information. Other attacks may also be possible.
Versions prior to Moonlight 2.4.1 and 3.99.3 are vulnerable.
Vendor Status:
Vendor as issued an update for this vulnerablity.
