CVE-2015-6114

CVE-2015-6114 affects Microsoft Silverlight 5 prior to 5.1.41105.00. The vulnerability allows remote attackers to bypass ASLR via a crafted web site, resulting in information disclosure. Connected advisories corroborate an information-disclosure vector arising from Silverlight manifest/resource p...

CVE-2015-6166

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

CVE-2015-6165

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6114

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

CVE-2015-6165

CVE-2015-6165 affects Microsoft Silverlight 5 before 5.1.41105.00. A crafted website can bypass ASLR to disclose information. Remediation details are not provided in the supplied documents.

Microsoft Silverlight RCE Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. A security vulnerability exists in Microsoft Silverlight, which arises from the program's failure to properly handle certain open and close...

Microsoft Silverlight Remote Code Execution Vulnerability (3106614)

This host is missing a critical security update according to Microsoft Bulletin MS15-129. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Silverlight CVE-2015-6166 Remote Code Execution Vulnerability

Description Microsoft Silverlight is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition. Technologies Affected...

Microsoft Silverlight CVE-2015-6114 Information Disclosure Vulnerability

Description Microsoft Silverlight is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft Silverlight 5 Developer Runtime Microsoft Silverligh...

KLA10718 Code execution vulnerabilities in Microsoft Graphics Component

Improper fonts handling was found in Microsoft Graphics Component used in Multiple Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2015-6108...

KLA10717 Multiple vulnerabilities in Microsoft Silverlight

Multiple serious vulnerabilities have been found in Microsoft Silverlight. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. Improper requests handling can be exploited remotely via a special...

Microsoft Silverlight < 5.1.41105.0 Multiple Vulnerabilities (MS15-128) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is affected by multiple remote code execution vulnerabilities due to improper handling of embedded fonts by the Windows font library. A remote attacker can exploit these by convincing a user to open a file or visit a website...

MS15-129: Security Update for Silverlight to Address Remote Code Execution (3106614) (Mac OS X)

The version of Microsoft Silverlight installed on the remote Mac OS X host is affected by the following vulnerabilities : - Multiple information disclosure vulnerabilities exist due to a failure to properly handle objects in memory. An attacker can exploit these issues, via crafted Silverlight...

VulnCheck KEV: CVE-2016-0034

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service DoS...

Microsoft Silverlight Remote Code Execution Vulnerability (3078662) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS15-080. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Silverlight < 5.1.40728.0 Multiple Vulnerabilities (MS15-080) (Mac OS X)

The Microsoft Silverlight installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities related to flaws in handling specially crafted TrueType fonts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid85347; scriptversion"1.10";...

Security Update for Microsoft Silverlight (KB3080333)

This security update to Silverlight includes fixes outlined in KB 3080333. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Silverlight Privilege Error Elevation of Privilege Vulnerability

Microsoft Silverlight is a cross-browser, cross-platform plug-in that brings the next generation of .NETFramework-based media experiences and rich interactive applications to the Web. A security vulnerability exists in Microsoft Silverlight, where a remote attacker can exploit a vulnerability to...

CVE-2015-1715

Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application, aka "Microsoft Silverlight Out of Browser Application Vulnerability."...

Design/Logic Flaw

Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application, aka "Microsoft Silverlight Out of Browser Application Vulnerability."...