Code execution vulnerability in Microsoft Silverlight

Beschreibung

Improper strings handling was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content.

---

Technical details

This vulnerability can be triggered while Silverlight decodes strings using a malicious decoder that can return negative offsets that cause Silverlight to replace unsafe object headers with contents provided by an attacker.

Ursprüngliche Informationshinweise

• CVE-2016-0034

CVE Liste

• CVE-2016-0034
  high

KB Liste

• 3126036

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com