CVE-2013-0074

published 2013-03-13

CVE-2013-0074: Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

KEV ITW EXPLOIT

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	silverlight	>= 5.0 < 5.1.20125.0	5.1.20125.0

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vulncheck 7.8 HIGH

cisa 7.8 HIGH