CVE-2013-0074

🗓️ 13 Mar 2013 00:00:00Reported by microsoftType

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability.

Reporter	Title	Published	Views	Family All 34
0day.today	Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access	26 Nov 201300:00	–	zdt
0day.today	MS12-022 Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access	27 Nov 201300:00	–	zdt
0day.today	Microsoft Silverlight - ScriptObject Unsafe Memory Access (MS13-022/MS13-087) Exploit	23 Mar 201700:00	–	zdt
ATTACKERKB	CVE-2013-0074	13 Mar 201300:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
Circl	CVE-2013-0074	12 Mar 201300:00	–	circl
CISA KEV Catalog	Microsoft Silverlight Double Dereference Vulnerability	25 May 202200:00	–	cisa_kev
Check Point Advisories	Microsoft Silverlight Pointer Dereference Memory Corruption (MS13-022; CVE-2013-0074; CVE-2013-3896)	2 Apr 201300:00	–	checkpoint_advisories
Cvelist	CVE-2013-0074	13 Mar 201300:00	–	cvelist
Exploit DB	Microsoft Internet Explorer - COALineDashStyleArray Unsafe Memory Access (MS12-022) (Metasploit)	27 Nov 201300:00	–	exploitdb

NVD

Node

microsoft silverlightRange5.0–5.1.20125.0

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
us-cert	www.us-cert.gov/ncas/alerts/TA13-071A
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

22 Apr 2026 16:45Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.8

CVSS 29.3

EPSS0.93187

SSVC

In Wild