Lucene search
RootSSV:61776HistoryMar 13, 2014 - 12:00 a.m.
Microsoft Silverlight DEP/ASLR安全限制绕过漏洞(CVE-2014-0319)
2014-03-1300:00:00
Root
www.seebug.org
11
0.003 Low
EPSS
Percentile
66.1%
BUGTRAQ ID: 66046
CVE(CAN) ID: CVE-2014-0319
Microsoft Silverlight是跨浏览器、跨平台的.NET实现，用于为Web构建媒体体验和交互应用。
Silverlight没有正确实现DEP和ASLR，在实现上存在安全限制绕过漏洞。成功利用后可导致绕过DEP/ASLR安全功能。
0
Microsoft Silverlight 5.x
临时解决方法：
- 临时在IE中阻止Microsoft Silverlight
- 临时阻止在Mozilla Firefox内运行Microsoft Silverlight
- 临时阻止在Mozilla Firefox内运行Microsoft Silverlight
厂商补丁：
Microsoft
Microsoft已经为此发布了一个安全公告（MS14-014）以及相应补丁:
MS14-014：Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)
链接：http://technet.microsoft.com/security/bulletin/MS14-014
Related
nessus
nessus
cve
cve
CVE-2014-0319
2014-03-12 05:15:19
nvd
nvd
CVE-2014-0319
2014-03-12 05:15:19
symantec
symantec
Microsoft Silverlight CVE-2014-0319 DEP/ASLR Security Bypass Vulnerability
2014-03-11 00:00:00
kaspersky
kaspersky
KLA10543 Security bypass vulnerability in Microsoft Silverlight
2014-04-11 00:00:00
KLA10608 Security bypass vulnerability in Microsoft Silverlight
2014-03-11 00:00:00
prion
prion
Security feature bypass
2014-03-12 05:15:00
openvas
openvas
Microsoft Silverlight DEP/ASLR Security Bypass Vulnerability (2932677)
2014-03-12 00:00:00
Microsoft Silverlight Security Bypass Vulnerability (2932677) - Mac OS X
2014-03-12 00:00:00
cvelist
cvelist
CVE-2014-0319
2014-03-12 01:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2014-03-18 00:00:00