PT-2010-1844 · Microsoft+1 · Windows+2

Carsten Book · Publicado 2010-08-11 · Atualizado 2018-10-12 · CVE-2010-0019

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 3.0.50611.0 on Windows Microsoft Silverlight versions prior to 3.0.41130.0 on Mac OS X

Description The issue arises from improper handling of pointers, allowing remote attackers to execute arbitrary code or cause a denial of service due to memory corruption and framework outage via a crafted web site.

Recommendations For Microsoft Silverlight on Windows, update to version 3.0.50611.0 or later. For Microsoft Silverlight on Mac OS X, update to version 3.0.41130.0 or later.

Correção

RCE

DoS

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-0019

Produtos afetados

Macos X

Silverlight

Windows

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-0019 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0019 · Nota