ria_enumerator

This plugin searches for various Rich Internet Application files. It currently searches for: Google gears manifests These files are used to determine which files are locally cached by google gears. They do not get cleared when the browser cache is cleared and may contain sensitive information. Fl...

Microsoft Silverlight Pointer Dereference Memory Corruption (MS13-022; CVE-2013-0074; CVE-2013-3896)

A pointer dereference vulnerability has been reported in Microsoft Silverlight. This vulnerability is due to insufficient verification of a pointer when rendering an HTML object. Remote attackers can exploit this vulnerability by enticing target users to visit a malicious web page, potentially...

CVE-2013-0074

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

Double free

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

Microsoft Silverlight Remote Code Execution Vulnerability-2814124 (Mac OS X)

This host is missing a critical security update according to Microsoft Bulletin MS13-022. OpenVAS Vulnerability Test $Id: secpodms13-022macosx.nasl 4570 2016-11-18 10:17:05Z antu123 $ Microsoft Silverlight Remote Code Execution Vulnerability-2814124 Mac OS X Authors: Antu Sanadi Copyright:...

Microsoft Silverlight Remote Code Execution Vulnerability (2814124)

This host is missing a critical security update according to Microsoft Bulletin MS13-022. OpenVAS Vulnerability Test $Id: secpodms13-022.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft Silverlight Remote Code Execution Vulnerability 2814124 Authors: Antu Sanadi Copyright: Copyright c 2013...

CVE-2013-0074

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka “Silverlight Double Dereference Vulnerability.” Recent...

Microsoft Silverlight code execution

Memory corruption...

CVE-2013-0074

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

CVE-2013-0074

CVE-2013-0074 (Microsoft Silverlight) affects Silverlight 5 and the 5 Developer Runtime prior to 5.1.20125.0. The root cause is improper validation of pointers during HTML object rendering, leading to a pointer-dereference memory corruption that can allow remote code execution via a crafted Silve...

Microsoft Silverlight Remote Code Execution Vulnerability (2814124)

This host is missing a critical security update according to Microsoft Bulletin MS13-022. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Silverlight Remote Code Execution Vulnerability (2814124) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS13-022. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-0074

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

CVE-2013-0074: Undefined Security Weakness

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

Security Update for Microsoft Silverlight (KB2814124)

This security update to Silverlight includes fixes outlined in KB 2814124. This update is backward compatible with web applications built using previous versions of Silverlight...

PT-2013-1343

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions 5 through 5.1.20125.0 Description The issue is related to insufficient validation of pointers during HTML object rendering, allowing remote attackers to execute arbitrary code via a crafted Silverlight applicatio...

Microsoft Silverlight Double Deference CVE-2013-0074 Remote Code Execution Vulnerability

Description Microsoft Silverlight is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition. Technologies Affected...

MS13-022: Vulnerability in Silverlight could allow remote code execution: March 12, 2013

None None...

Microsoft Silverlight - ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule EOS def initializeinfo= superupdateinfoinfo, 'Name' = "MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access",...

MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access

This module exploits a vulnerability in Microsoft Silverlight. The vulnerability exists on the Initialize method from System.Windows.Browser.ScriptObject, which access memory in an unsafe manner. Since it is accessible for untrusted code user controlled it's possible to dereference arbitrary memo...