CVE-2013-0074
Microsoft Silverlight Double Dereference Vulnerability
CVSS
7.8
High
EPSS
78.9%
p100
KEV
YES
May 25, 2022
Exploit Today
80
0-100
Published: Mar 13, 2013 · Last modified: Aug 14, 2026
Product
Microsoft / Silverlight
Vulnerability
Microsoft Silverlight Double Dereference Vulnerability
Added to KEV
May 25, 2022
Remediate by
Jun 15, 2022
Known ransomware use
Yes
Summary description
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2013-0074
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
- www.us-cert.govhttp://www.us-cert.gov/ncas/alerts/TA13-071A
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565
- www.us-cert.govhttp://www.us-cert.gov/ncas/alerts/TA13-071A
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0074