CVE-2013-0074

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 13, 2013
Updated: Dec 19, 2024

Summary

CVE-2013-0074 is a vulnerability affecting Microsoft Silverlight 5 and its Developer Runtime versions prior to 5.1.20125.0. This issue arises due to Silverlight's failure to validate pointers during HTML object rendering. An attacker can exploit this flaw by developing a specially crafted Silverlight application, which can result in the execution of arbitrary code upon being rendered in a vulnerable system. This vulnerability, also known as the "Silverlight Double Dereference Vulnerability," poses a significant risk as it allows remote attackers to gain unauthorized access and potentially take control of the affected system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Silverlight

Affected Vendors

  • Microsoft