Lucene search

K
cve[email protected]CVE-2013-3178
HistoryJul 10, 2013 - 3:46 a.m.

CVE-2013-3178

2013-07-1003:46:00
CWE-94
web.nvd.nist.gov
107
4
microsoft
silverlight
cve-2013-3178
security
vulnerability
remote attackers
arbitrary code
denial of service

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.938 High

EPSS

Percentile

99.1%

Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka “Null Pointer Vulnerability.”

Social References

More

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.938 High

EPSS

Percentile

99.1%