Microsoft Silverlight Security Mechanism Bypass Vulnerability

Microsoft Silverlight is a cross-browser, cross-platform .NET implementation for building media experiences and interactive applications for the Web. A security mechanism bypass vulnerability exists in Microsoft Silverlight that allows remote attackers to pass through the ASLR protection mechanis...

CVE-2015-6166

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

CVE-2015-6165

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6114

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

Information disclosure

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

Out-of-bounds

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

Information disclosure

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

CVE-2015-6114

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

CVE-2015-6114

CVE-2015-6114 affects Microsoft Silverlight 5 prior to 5.1.41105.00. The vulnerability allows remote attackers to bypass ASLR via a crafted web site, resulting in information disclosure. Connected advisories corroborate an information-disclosure vector arising from Silverlight manifest/resource p...

CVE-2015-6165

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6165

CVE-2015-6165 affects Microsoft Silverlight 5 before 5.1.41105.00. A crafted website can bypass ASLR to disclose information. Remediation details are not provided in the supplied documents.

CVE-2015-6166

Microsoft Silverlight 5 prior to 5.1.41105.00 is affected by CVE-2015-6166 due to improper handling of certain open/close requests, enabling remote code execution or, per the CVE, a denial of service via out-of-bounds read/write access. Severity is high (CVSS 9.3). Affected product: Silverlight 5...

CVE-2015-6166

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

Microsoft Silverlight Remote Code Execution Vulnerability (3106614)

This host is missing a critical security update according to Microsoft Bulletin MS15-129. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Silverlight Information Disclosure Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. An information leakage vulnerability exists in Microsoft Silverlight that stems from the program failing to properly handle objects in memory. A...

Microsoft Silverlight RCE Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. A security vulnerability exists in Microsoft Silverlight, which arises from the program's failure to properly handle certain open and close...

Security Update for Microsoft Silverlight (KB3106614)

This security update to Silverlight includes fixes outlined in KB 3106614. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft .NET Manifest Resource Information Disclosure Vulnerability

Talos Vulnerability Report TALOS-2015-0130 Microsoft .NET Manifest Resource Information Disclosure Vulnerability December 8, 2015 CVE Number CVE-2015-6114 Summary An exploitable information leak or denial of service vulnerability exists in the manifest resource parsing functionality of the .NET...

Microsoft Silverlight CVE-2015-6166 Remote Code Execution Vulnerability

Description Microsoft Silverlight is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition. Technologies Affected...

Microsoft Silverlight < 5.1.41105.0 Multiple Vulnerabilities (MS15-128) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is affected by multiple remote code execution vulnerabilities due to improper handling of embedded fonts by the Windows font library. A remote attacker can exploit these by convincing a user to open a file or visit a website...