MS14-014: Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)

The version of Microsoft Silverlight installed on the remote host is reportedly affected by a security feature bypass vulnerability due to improper implementation of Data Execution Protection DEP and Address Space Layout Randomization ASLR. If an attacker could trick a user on the affected system...

Web Site Client Access Policy File Detection

The remote web server contains a client access policy file. This is a simple XML file used by Microsoft Silverlight to allow access to services that reside outside the exact web domain from which a Silverlight control originated. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MS12-022 Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access

Exploit for windows platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 EOS def initializeinfo= superupdateinfoinfo, 'Name' = "MS12-022 Microsoft...

Blackhole and Cool Exploit Kits Nearly Extinct

When authorities in Russia arrested Paunch, the alleged creator of the Blackhole exploit kit, last month, security researchers and watchers of the malware underground predicted that taking him off the board would put a dent in the use of Blackhole and force its customers onto other platforms. Six...

Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access

This Metasploit module exploits a vulnerability on Microsoft Silverlight. The vulnerability exists on the Initialize method from System.Windows.Browser.ScriptObject, which access memory in an unsafe manner. Since it is accessible for untrusted code user controlled it's possible to dereference...

Microsoft Silverlight Null Pointer Dereference Code Execution (MS13-052; CVE-2013-3178)

A null pointer dereference vulnerability exists in Microsoft Silverlight...

[PSA-2013-1022-1] Microsoft Silverlight Invalid Typecast / Memory Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-1022-1 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title:...

Microsoft Silverlight information leakage

Memory content leakage...

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

Design/Logic Flaw

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

CVE-2013-3896

CVE-2013-3896 affects Microsoft Silverlight 5 before 5.1.20913.0, where improper pointer validation during access to Silverlight elements leads to potential information disclosure. Affected component is Silverlight runtime; impact is partial confidentiality loss without integrity or availability ...

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka “Silverlight Vulnerability.” Recent assessments: Assessed Attacker Value: ...

MS13-087: Vulnerability in Silverlight Could Allow Information Disclosure (2890788)

The version of Microsoft Silverlight installed on the remote host reportedly is affected by an information disclosure vulnerability due to its failure to properly handle certain objects in memory. If an attacker could trick a user on the affected system into visiting a website hosting a malicious...

Microsoft Silverlight Information Disclosure Vulnerability (2890788) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS13-087. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Silverlight Information Disclosure Vulnerability (2890788)

This host is missing an important security update according to Microsoft Bulletin MS13-087. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Security Update for Microsoft Silverlight (KB2890788)

This security update to Silverlight includes fixes outlined in KB 2890788. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Silverlight CVE-2013-3896 Information Disclosure Vulnerability

Description Microsoft Silverlight is prone to an information-disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow attackers to gain access to potentially sensitive information that may aid in furthe...

Microsoft Silverlight Remote Code Execution Vulnerabilities (2861561)

This host is missing a critical security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...