CVE-2016-0034—Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Vulnerability Name

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Description

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

The impacted products are end-of-life and should be disconnected if still in use.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2016-0034

Related Weaknesses

• CWE-20