CVE-2010-1898

The Common Language Runtime CLR in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote...

CVE-2010-0019

Summary (CVE-2010-0019): A memory corruption vulnerability in Microsoft Silverlight 3 (Windows) before 3.0.50611.0 and Mac OS X before 3.0.41130.0 arises from improper pointer handling, allowing remote code execution or a denial of service when a user visits a crafted web page. An attacker could ...

CVE-2010-0019

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and framework outage via a crafted web site, aka "Microsoft...

CVE-2010-1898

CVE-2010-1898 is a remote code execution vulnerability in the Microsoft .NET CLR handling delegates to virtual methods, affecting CLR-based apps and Silverlight. The issue enables arbitrary code execution via three attack scenarios: XBAPs (XAML browser applications), ASP.NET pages, or standalone ...

Microsoft Security Bulletin MS10-060 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

Microsoft Security Bulletin MS10-060 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution 2265906 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves two...

Microsoft .Net and Silverlight security vulnerabilities

Memory corruption, code execution...

MS10-060: Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

The remote Windows host is running a version of the Microsoft .NET Framework and/or Microsoft Silverlight affected by multiple vulnerabilities : - Silverlight improperly handles pointers in an unspecified manner. A remote attacker could exploit this by tricking a user into viewing a web page with...

Inside Microsoft's August Patch Tuesday

Microsoft has released their planned 14 bulletins fixing 34 vulnerabilities today. There are four bulletins that administrators should look at patching as soon as possible. MS10-052 and MS10-055 both affect media files and are rated as Critical. Opening a malicious media file can lead to remote...

Security Update for Microsoft Silverlight (KB978464)

This security update to Silverlight includes fixes outline in KB 978464. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Releases August Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Office, and Silverlight as part of the Microsoft Security Bulletin Summary for August 2010. These vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges...

Microsoft Silverlight ActiveX Control Pointer Memory Corruption Vulnerability

Description Microsoft Silverlight ActiveX control is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the...

Microsoft Silverlight Pointer Handling Memory Corruption (MS10-060; CVE-2010-0019)

Microsoft Silverlight is a cross-browser, cross-platform implementation of the Microsoft .NET Framework for building media experiences and rich interactive applications for the Web. A memory corruption vulnerability has been reported in the way that Microsoft Silverlight handles pointers. To...

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service...

Microsoft Releases Advance Notification for August Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its August release will contain 14 bulletins. Eight bulletins will have the severity rating of critical and will be for Microsoft Windows, Internet Explorer, Office, and Silverlight. The remaining six bulletins will hav...

Update for Microsoft Silverlight (KB979202)

This update to Silverlight includes functional, performance, reliability and security improvements. This update is backward compatible with web applications built using previous versions of Silverlight...

discuz! NT 3.0 special circumstances the use of vulnerability-vulnerability warning-the black bar safety net

Test environment: WINDOWS2003+IIS6 Vulnerability version: 3.0.0 The use of the process: Prepare a Only ASP. Encrypted named:ydteamcom. asp Open forum - landing on a post of the account - any area posted by - pointbulk upload You will be prompted to install a Microsoft Silverlight...

discuz! NT 3.0 special circumstances the use of vulnerability-vulnerability warning-the black bar safety net

Test environment: WINDOWS2003+IIS6 Vulnerability version: 3.0.0 The use of the process: Prepare a Only ASP. Encrypted named:ydteamcom. asp Open forum - landing on a post of the account - any area posted by - pointbulk upload You will be prompted to install a Microsoft Silverlight...

Microsoft Silverlight Detection

A version of Microsoft's Silverlight is installed on this host. Microsoft Silverlight is a web application framework that provides functionalities similar to those in Adobe Flash, integrating multimedia, graphics, animations and interactivity into a single runtime environment. C Tenable Network...

CVE-2009-2497

The Common Language Runtime CLR in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP, 2 a crafted Silverlight application, ...

Design/Logic Flaw

The Common Language Runtime CLR in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP, 2 a crafted Silverlight application, ...