PT-2012-2374 · Microsoft · Silverlight

Alex Plaskett · Publicado 2012-05-09 · Atualizado 2018-10-12 · CVE-2012-0176

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 4.1.10329

Description A double free issue in Microsoft Silverlight allows remote attackers to execute arbitrary code via crafted XAML glyphs.

Recommendations For versions prior to 4.1.10329, update to version 4.1.10329 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-0176

Produtos afetados

Silverlight

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-0176 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA12-129A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 · Aviso do Fabricante
• http://securitytracker.com/id?1027040 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15574 · Nota
• http://secunia.com/advisories/49122 · Nota
• http://securityfocus.com/bid/53360 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0176 · Nota