Lucene search

K
kasperskyKaspersky LabKLA10581
HistoryMay 12, 2015 - 12:00 a.m.

KLA10581 Privilege escalation vulnerability in Microsoft Silverlight

2015-05-1200:00:00
Kaspersky Lab
threats.kaspersky.com
20

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

Detect date:

05/12/2015

Severity:

Critical

Description:

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed Silverlight application.

Affected products:

Microsoft Silverlight 5
Microsoft Silverlight 5 Developer Runtime

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

Microsoft advisory
CVE-2015-1715

Impacts:

PE

Related products:

Microsoft Silverlight

CVE-IDS:

CVE-2015-17159.3Critical

Microsoft official advisories:

KB list:

3056819
3058985

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%