PT-2010-1844 · Microsoft+1 · Windows+2

Carsten Book · Published 2010-08-11 · Updated 2018-10-12 · CVE-2010-0019

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 3.0.50611.0 on Windows Microsoft Silverlight versions prior to 3.0.41130.0 on Mac OS X

Description The issue arises from improper handling of pointers, allowing remote attackers to execute arbitrary code or cause a denial of service due to memory corruption and framework outage via a crafted web site.

Recommendations For Microsoft Silverlight on Windows, update to version 3.0.50611.0 or later. For Microsoft Silverlight on Mac OS X, update to version 3.0.41130.0 or later.

Fix

RCE

DoS

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-0019

Affected Products

Macos X

Silverlight

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-0019 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0019 · Note