Security Update for Microsoft Silverlight (KB2512827)

This security update to Silverlight includes fixes outlined in KBs 2514842 and 2512827. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Silverlight & .NET Framework Invalid Array Offset Remote Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service conditio...

MS11-039: Vulnerability in the .NET Framework and in Microsoft Silverlight could allow remote code execution: June 14, 2011

Resolves security vulnerabilities that exist in the .NET Framework and in Microsoft Silverlight that could allow arbitrary code to run when a maliciously modified file is opened.INTRODUCTIONMicrosoft has released security bulletin MS11-039. To view the complete security bulletin, visit one of the...

Microsoft Silverlight Multiple Memory Leak Vulnerabilities

This host is installed with Microsoft Silverlight and is prone to to multiple memory leak vulnerabilities. OpenVAS Vulnerability Test $Id: gbmssilverlightmultiplememoryleakvuln.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft Silverlight Multiple Memory Leak Vulnerabilities Authors: Antu Sanad...

Microsoft Silverlight Multiple Memory Leak Vulnerabilities

Microsoft Silverlight is prone to multiple memory leak vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Silverlight Version Detection

Detects the installed version of Microsoft Silverlight on Windows. The script logs in via smb, searches for Silverlight in the registry and gets the version from registry. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

MS KB2526954: Microsoft Silverlight 4.0 < 4.0.60310 Multiple Vulnerabilities

The remote Windows host is running a version of Microsoft Silverlight that is affected by multiple vulnerabilities : - A memory leak exists relating to a popup control and a custom 'DependencyProperty' property. CVE-2011-1844 - Multiple memory leaks exist in the 'DataGrid' control implementation...

CVE-2011-1844

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

CVE-2011-1845

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

Design/Logic Flaw

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

Memory corruption

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

CVE-2011-1845

Summary: CVE-2011-1845 affects Microsoft Silverlight 4, where multiple memory leaks in the DataGrid control implementation (and related INotifyDataErrorInfo and TextBlock/TextBox usage) can be exploited to cause a denial of service via memory consumption. The issue is triggered by specific UI sce...

CVE-2011-1844

Microsoft Silverlight 4 prior to 4.0.60310.0 is affected by CVE-2011-1844 due to a memory leak in a popup control tied to a custom DependencyProperty, leading to possible denial of service from memory exhaustion. The issue is confirmed by multiple sources (NVD entry and Red Hat advisory) and is d...

CVE-2011-1845

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service memory consumption via an application involving 1 subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or 2 a TextBlock or TextBox...

Update for Microsoft Silverlight (KB2526954)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

CVE-2010-0019

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and framework outage via a crafted web site, aka "Microsoft...

Memory corruption

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and framework outage via a crafted web site, aka "Microsoft...

CVE-2010-1898

CVE-2010-1898 is a remote code execution vulnerability in the Microsoft .NET CLR handling delegates to virtual methods, affecting CLR-based apps and Silverlight. The issue enables arbitrary code execution via three attack scenarios: XBAPs (XAML browser applications), ASP.NET pages, or standalone ...

CVE-2010-0019

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and framework outage via a crafted web site, aka "Microsoft...

CVE-2010-0019

Summary (CVE-2010-0019): A memory corruption vulnerability in Microsoft Silverlight 3 (Windows) before 3.0.50611.0 and Mac OS X before 3.0.41130.0 arises from improper pointer handling, allowing remote code execution or a denial of service when a user visits a crafted web page. An attacker could ...