logo

CVE-2013-0074 - Microsoft Silverlight Double Dereference Vulnerability

Project:Microsoft

Product:Silverlight

Date Added:2022-05-25Due Date:2022-06-15

Vulnerability Name

Microsoft Silverlight Double Dereference Vulnerability

Description

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

Known To Be Used in Ransomware Campaigns?

Known

Action

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-0074