Code execution vulnerabilities in Microsoft Silverlight

Description

An unspecified vulnerabilities were found in Microsoft Silverlight. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed font data.

Original advisories

• MS12-034

• CVE-2011-3402
• CVE-2012-0159

Exploitation

This vulnerability can be exploited by the following malware:

https://threats.kaspersky.com/en/threat/Exploit.Win32.CVE-2011-3402/

Public exploits exist for this vulnerability.

Related products

• Microsoft-Silverlight

CVE list

• CVE-2011-3402
  critical
• CVE-2012-0159
  critical

KB list

• 2690729
• 2636927

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com