CVE-2011-1845

CWE-3993 documents3 sources
Severity
7.8HIGH
EPSS
19.7%
top 4.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Silverlight
Timeline
PublishedMay 3
Latest updateMay 17

Description

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDmicrosoft/silverlight4.0.60129.0+6

Patches

Patch: isc.sans.edu ↗Patch: support.microsoft.com ↗Patch: isc.sans.edu ↗

🔴Vulnerability Details

2
GHSA
GHSA-363j-27mr-4whg: Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4↗2022-05-17
▶
CVEList
CVE-2011-1845: Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4↗2011-05-03
▶
CVE-2011-1845 (HIGH CVSS 7.8) | Multiple memory leaks in the DataGr | cvebase.io