MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities

Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet and intranets and is deployed on several communal and...

CVE-2016-3367

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

CVE-2016-3367

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

Memory corruption

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

CVE-2016-3367

Microsoft Silverlight Memory Corruption (CVE-2016-3367) affects Silverlight 5 before 5.1.50709.0. The vulnerability stems from improper memory handling in StringBuilder during string-insert/append, enabling a remote attacker to run arbitrary code via a crafted web site. Impact is remote code exec...

CVE-2016-3367

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

CVE-2016-3367: Improper Restriction of Operations within the Bounds of a Memory Buffer

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."...

PT-2016-5430

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 5.1.50709.0 Description The issue is related to improper memory allocation for string-insert and string-append operations in StringBuilder. This allows remote attackers to execute arbitrary code via a...

Microsoft Silverlight Remote Code Execution Vulnerability (3182373)

This host is missing a critical security update according to Microsoft Bulletin MS16-109. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft Silverlight (KB3182373)

This security update to Silverlight includes fixes outlined in KB 3182373. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Silverlight Memory Corruption Vulnerability

A remote code execution vulnerability exists when Microsoft Silverlight improperly allows applications to access objects in memory. The vulnerability could corrupt system memory, which could allow an attacker to execute arbitrary code. In a web-browsing scenario, an attacker who successfully...

KLA10872 Code execution vulnerability in Microsoft Silverlight

An improper memory objects access was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Silverlight application. Original advisories CVE-2016-3367 Exploitation Related...

MS16-109: Security Update for Silverlight (3182373)

The version of Microsoft Silverlight installed on the remote Windows host is affected by a remote code execution vulnerability due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing a specially crafte...

Microsoft Silverlight CVE-2016-3367 Remote Memory Corruption Vulnerability

Description Microsoft Silverlight is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. This could allow attackers to execute arbitrary code in the context of the currently logged-in user. Fail...

MS16-109: Security Update for Silverlight (3182373) (Mac OS X)

The version of Microsoft Silverlight installed on the remote Mac OS X host is affected by a remote code execution vulnerability due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing a specially craft...

July 12, 2016 — KB3172985 (OS Build 10586.494)

None None...

The vulnerability of Microsoft Silverlight software allows a malicious intruder to compromise protected information.

The vulnerability exists in the security features of Silverlight due to the improper implementation of Data Execution Prevention DEP and Address Space Layout Randomization ASLR. This allows attackers to circumvent these security mechanisms by exploiting the vulnerability, enabling them to execute...

Update for Microsoft Silverlight (KB3162593)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

New Angler Exploits Bypass EMET Mitigations

New Microsoft Silverlight and Adobe Flash exploits that bypass Microsoft’s Enhanced Mitigation Experience Toolkit EMET have found their way into an updated version of the Angler Exploit Kit. EMET is a suite of freely available tools for Windows machines that mitigate memory-based attacks. The...

Angler Exploit Kit Evading EMET

We recently encountered some exploits from Angler Exploit Kit EK that are completely evading Microsoft’s Enhanced Mitigation Experience Toolkit EMET. This is something we are seeing for the first time in the wild, and we only observed it affecting systems running Windows 7. Angler EK uses complex...