PT-2011-3406 · Microsoft · Silverlight

Publicado 2011-05-03 · Atualizado 2011-07-14 · CVE-2011-1845

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 4.0.60310.0

Description The issue is related to multiple memory leaks in the DataGrid control implementation. This can be exploited by remote attackers to cause a denial of service through memory consumption. The exploitation can occur via an application that involves subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or the use of a TextBlock or TextBox element.

Recommendations For versions prior to 4.0.60310.0, update to version 4.0.60310.0 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-1845

Produtos afetados

Silverlight

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1845 · Nota
• http://isc.sans.edu/diary.html?storyid=10747 · Correção
• http://support.microsoft.com/kb/2526954 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1845 · Nota de Segurança