CVE-2014-0319
published 2014-03-12CVE-2014-0319: Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection…
PriorityP335high7.1CVSS 2.0
AVNACMAuNCNICAN
EPSS
5.96%
92.5th percentile
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
| microsoft | silverlight | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Windows Server 2003 SP2 up to Server 2012 R2 Pool Memory Allocation access control (MS14-045 / Nessus ID 72933)
vuldb·2026-05-07·CVSS 7.1
CVE-2014-0319 [HIGH] Microsoft Windows Server 2003 SP2 up to Server 2012 R2 Pool Memory Allocation access control (MS14-045 / Nessus ID 72933)
A vulnerability has been found in Microsoft Windows Server 2003 SP2 up to Server 2012 R2 and classified as problematic. This issue affects some unknown processing of the component Pool Memory Allocation Handler. This manipulation causes improper access controls.
This vulnerability is tracked as CVE-2014-0319. The attack is restricted to local execution. No exploit exists.
Applying a patch is the recommended action to fix this issue.
VulDB
Microsoft Windows Server 2003 SP2 up to Server 2012 R2 Font access control (MS14-045 / Nessus ID 72933)
vuldb·2026-05-07·CVSS 7.1
CVE-2014-0319 [HIGH] Microsoft Windows Server 2003 SP2 up to Server 2012 R2 Font access control (MS14-045 / Nessus ID 72933)
A vulnerability, which was classified as problematic, was found in Microsoft Windows Server 2003 SP2 up to Server 2012 R2. This vulnerability affects unknown code of the component Font Handler. The manipulation results in improper access controls.
This vulnerability is identified as CVE-2014-0319. The attack is only possible with local access. There is not any exploit available.
It is advisable to implement a patch to correct this issue.
GHSA
GHSA-g6qr-5c4j-jqmc: Microsoft Silverlight 5 before 5
ghsa_unreviewed·2022-05-14
CVE-2014-0319 [HIGH] GHSA-g6qr-5c4j-jqmc: Microsoft Silverlight 5 before 5
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."
No detection rules found.
No public exploits indexed.
Talos
Micorosft Update Tuesday: March 2014, all about IE (including two 0-day fixes)
blogs_talos·2014-03-11·CVSS 9.3
CVE-2014-0322 [CRITICAL] Micorosft Update Tuesday: March 2014, all about IE (including two 0-day fixes)
It's Microsoft Update Tuesday. While this month is relatively minor, a total of 5 bulletins, it is pretty large for the requisite Internet Explorer bulletin. There’s a total of 23 CVEs covered by the bulletins, 18 of which are found in IE.
There’s 2 critical and 3 important bulletins this month:
MS14-012 is the first critical bulletin and is the IE bulletin. Most of the vulnerabilities are, as usual, the result of "use-after-free" vulnerabilities. One of the vulnerabilities, CVE-2014-0322, was known publicly before the update and saw targeted attacks since February 14th. The temporary workaround in security advisory 2934088 that has been available from Microsoft since February 19th is now being replaced by a more formal fix. The vulnerability was being exploited in a watering hole attack
Talos
Micorosft Update Tuesday: March 2014, all about IE (including two 0-day fixes)
blogs_talos·2014-03-11·CVSS 9.3
[CRITICAL] Micorosft Update Tuesday: March 2014, all about IE (including two 0-day fixes)
## Micorosft Update Tuesday: March 2014, all about IE (including two 0-day fixes)
It's Microsoft Update Tuesday. While this month is relatively minor, a total of 5 bulletins, it is pretty large for the requisite Internet Explorer bulletin. There’s a total of 23 CVEs covered by the bulletins, 18 of which are found in IE.
There’s 2 critical and 3 important bulletins this month:
MS14-012 is the first critical bulletin and is the IE bulletin. Most of the vulnerabilities are, as usual, the result of "use-after-free" vulnerabilities. One of the vulnerabilities, CVE-2014-0322 , was known publicly before the update and saw targeted attacks since February 14 th . The temporary workaround in security advisory 2934088 that has been available from Microsoft since February 19 th is now being replace
2014-03-12
Published