Lucene search

K
kasperskyKaspersky LabKLA10608
HistoryMar 11, 2014 - 12:00 a.m.

KLA10608 Security bypass vulnerability in Microsoft Silverlight

2014-03-1100:00:00
Kaspersky Lab
threats.kaspersky.com
10

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

0.003 Low

EPSS

Percentile

65.6%

Detect date:

03/11/2014

Severity:

Critical

Description:

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can bypass DEP and ASLR protection. This vulnerability can be exploited remotely via an unspecified vectors.

Affected products:

Microsoft Silverlight 5

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2014-0319

Impacts:

SB

Related products:

Microsoft Silverlight

CVE-IDS:

CVE-2014-03197.1High

Microsoft official advisories:

KB list:

2932677

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

0.003 Low

EPSS

Percentile

65.6%