MS12-022 Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer MANIFE...

WordPress Silverlight Media Player Plugin <= 0.8 - XSS

Because of this vulnerability in uploader.php, the attackers can inject arbitrary web script or HTML via the "postid" parameter. Solution Update the plugin...

VulnCheck KEV: CVE-2013-0074

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application...

Netflix Users Targeted by Microsoft Silverlight Exploits

Netflix, the world’s largest Internet Video Subscription service with more than 35.7 million customers in U.S alone, that runs on the Microsoft Silverlight platform, has now become a popular target for cybercriminals, as public awareness of Java and Flash flaws is increasing. Silverlight is a...

Malvertising Redirecting to Angler EK, Silverlight Exploits

The fact that Netflix accounts for one-third of Internet traffic during peak evening hours, and that it runs on the Microsoft Silverlight platform, is just too tempting a combination for hackers to pass up. For the second time in six months, criminal hacker groups are zeroing in on Silverlight...

Automattic: Simplenote Silverlight cross-domain policy misconfiguration

The Simplenote application publishes a Silverlight cross-domain policy which allows access from any domain. Allowing access from all domains means that any domain can perform two-way interaction with this application. This policy is likely to present a significant security risk. If a user is logg...

KLA10543 Security bypass vulnerability in Microsoft Silverlight

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via an unknown vectors. Original advisories MS14-014 CVE-2014-0319 Related products Microsoft-Silverligh...

Microsoft Windows multiple security vulnerabilities

DirectShow memory corruptions, SilverLight restrictions bypass, SAMR restrictions bypass, kernel mode drivers privilege escalations...

Microsoft Silverlight DEP/ASLR安全限制绕过漏洞(CVE-2014-0319)

BUGTRAQ ID: 66046 CVECAN ID: CVE-2014-0319 Microsoft Silverlight是跨浏览器、跨平台的.NET实现，用于为Web构建媒体体验和交互应用。 Silverlight没有正确实现DEP和ASLR，在实现上存在安全限制绕过漏洞。成功利用后可导致绕过DEP/ASLR安全功能。 0 Microsoft Silverlight 5.x 临时解决方法： 临时在IE中阻止Microsoft Silverlight 临时阻止在Mozilla Firefox内运行Microsoft Silverlight 临时阻止在Mozilla...

CVE-2014-0319

Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."...

Security feature bypass

Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."...

CVE-2014-0319

CVE-2014-0319 affects Microsoft Silverlight 5 (before 5.1.30214.0) and Silverlight 5 Developer Runtime (before 5.1.30214.0). The vulnerability is a security feature bypass (DEP/ASLR) due to improper implementation, enabling bypass of DEP and ASLR protections via unspecified vectors. Affected prod...

CVE-2014-0319

Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."...

Microsoft Silverlight DEP/ASLR Security Bypass Vulnerability (2932677)

This host is missing an important security update according to Microsoft Bulletin MS14-014. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Silverlight Security Bypass Vulnerability (2932677) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS14-014. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Security Update for Microsoft Silverlight (KB2932677)

This security update to Silverlight includes fixes outlined in KB 2932677. This update is backward compatible with web applications built using previous versions of Silverlight...

The March 2014 Security Updates

This month we release five bulletins to address 23 unique CVEs in Microsoft Windows, Internet Explorer and Silverlight. If you need to prioritize, the update for Internet Explorer addresses the issue first described in Security Advisory 2934088, so it should be at the top of your list. While that...

Microsoft Silverlight CVE-2014-0319 DEP/ASLR Security Bypass Vulnerability

Description Microsoft Silverlight is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Microsoft Silverlight 5 Developer...

KLA10608 Security bypass vulnerability in Microsoft Silverlight

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can bypass DEP and ASLR protection. This vulnerability can be exploited remotely via an unspecified vectors. Original advisories CVE-2014-0319 Related products Microsoft-Silverlight C...

MS14-014: Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)

The version of Microsoft Silverlight installed on the remote host is reportedly affected by a security feature bypass vulnerability due to improper implementation of Data Execution Protection DEP and Address Space Layout Randomization ASLR. If an attacker could trick a user on the affected system...