Lucene search

K
nvd[email protected]NVD:CVE-2013-3178
HistoryJul 10, 2013 - 3:46 a.m.

CVE-2013-3178

2013-07-1003:46:10
CWE-94
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.928

Percentile

99.0%

Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka “Null Pointer Vulnerability.”

Affected configurations

Nvd
Node
microsoftsilverlightMatch5.0.60401.0
OR
microsoftsilverlightMatch5.0.60818.0
OR
microsoftsilverlightMatch5.0.60818.0rc
OR
microsoftsilverlightMatch5.0.61118.0
OR
microsoftsilverlightMatch5.1.10411.0
OR
microsoftsilverlightMatch5.1.20125.0

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.928

Percentile

99.0%