Microsoft Silverlight Security Mechanism Bypass Vulnerability

Microsoft Silverlight is a cross-browser, cross-platform .NET implementation for building media experiences and interactive applications for the Web. A security mechanism bypass vulnerability exists in Microsoft Silverlight that allows remote attackers to pass through the ASLR protection mechanis...

CVE-2015-6166

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

CVE-2015-6165

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6114

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

Out-of-bounds

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

Information disclosure

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

Information disclosure

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6114

CVE-2015-6114 affects Microsoft Silverlight 5 prior to 5.1.41105.00. The vulnerability allows remote attackers to bypass ASLR via a crafted web site, resulting in information disclosure. Connected advisories corroborate an information-disclosure vector arising from Silverlight manifest/resource p...

CVE-2015-6166

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read or write access via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."...

CVE-2015-6165

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...

CVE-2015-6166

Microsoft Silverlight 5 prior to 5.1.41105.00 is affected by CVE-2015-6166 due to improper handling of certain open/close requests, enabling remote code execution or, per the CVE, a denial of service via out-of-bounds read/write access. Severity is high (CVSS 9.3). Affected product: Silverlight 5...

CVE-2015-6114

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...

CVE-2015-6165

CVE-2015-6165 affects Microsoft Silverlight 5 before 5.1.41105.00. A crafted website can bypass ASLR to disclose information. Remediation details are not provided in the supplied documents.

Microsoft Silverlight RCE Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. A security vulnerability exists in Microsoft Silverlight, which arises from the program's failure to properly handle certain open and close...

Microsoft Silverlight Information Disclosure Vulnerability

Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. An information leakage vulnerability exists in Microsoft Silverlight that stems from the program failing to properly handle objects in memory. A...

Microsoft Silverlight Remote Code Execution Vulnerability (3106614)

This host is missing a critical security update according to Microsoft Bulletin MS15-129. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft Silverlight (KB3106614)

This security update to Silverlight includes fixes outlined in KB 3106614. This update is backward compatible with web applications built using previous versions of Silverlight...

KLA10718 Code execution vulnerabilities in Microsoft Graphics Component

Improper fonts handling was found in Microsoft Graphics Component used in Multiple Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2015-6108...

Microsoft Windows Graphics Component CVE-2015-6108 Memory Corruption Vulnerability

Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft .NET Framework 3.0 SP2...

Microsoft Silverlight < 5.1.41105.0 Multiple Vulnerabilities (MS15-128) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is affected by multiple remote code execution vulnerabilities due to improper handling of embedded fonts by the Windows font library. A remote attacker can exploit these by convincing a user to open a file or visit a website...