Lucene search

K
nvd[email protected]NVD:CVE-2014-0319
HistoryMar 12, 2014 - 5:15 a.m.

CVE-2014-0319

2014-03-1205:15:19
CWE-264
web.nvd.nist.gov
5

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

61.5%

Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka “Silverlight DEP/ASLR Bypass Vulnerability.”

Affected configurations

Nvd
Node
microsoftsilverlightMatch5.0.60401.0
OR
microsoftsilverlightMatch5.0.60818.0
OR
microsoftsilverlightMatch5.0.60818.0rc
OR
microsoftsilverlightMatch5.0.61118.0
OR
microsoftsilverlightMatch5.1.10411.0
OR
microsoftsilverlightMatch5.1.20125.0
OR
microsoftsilverlightMatch5.1.20513.0
OR
microsoftsilverlightMatch5.1.20913.0
VendorProductVersionCPE
microsoftsilverlight5.0.60401.0cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*
microsoftsilverlight5.0.60818.0cpe:2.3:a:microsoft:silverlight:5.0.60818.0:*:*:*:*:*:*:*
microsoftsilverlight5.0.60818.0cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*
microsoftsilverlight5.0.61118.0cpe:2.3:a:microsoft:silverlight:5.0.61118.0:*:*:*:*:*:*:*
microsoftsilverlight5.1.10411.0cpe:2.3:a:microsoft:silverlight:5.1.10411.0:*:*:*:*:*:*:*
microsoftsilverlight5.1.20125.0cpe:2.3:a:microsoft:silverlight:5.1.20125.0:*:*:*:*:*:*:*
microsoftsilverlight5.1.20513.0cpe:2.3:a:microsoft:silverlight:5.1.20513.0:*:*:*:*:*:*:*
microsoftsilverlight5.1.20913.0cpe:2.3:a:microsoft:silverlight:5.1.20913.0:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

61.5%