Comment 0 for bug 691780

Revision history for this message
Chris Howie (chrishowie) wrote :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4254
http://secunia.com/advisories/42373/

A bug in generics allows violation of the type system. When paired with delegate types, this may allow the execution of arbitrary code. 2.3.0.1 is the most recent version and is currently the only 2.x version free of this bug.