CVE-2013-0074
Microsoft Silverlight Double Dereference Vulnerability
CVSS
7.8
Alto
EPSS
78.9%
p100
KEV
SÍ
25 may 2022
Exploit Today
80
0-100
Publicado: 13 mar 2013 · Última mod.: 14 ago 2026
Producto
Microsoft / Silverlight
Vulnerabilidad
Microsoft Silverlight Double Dereference Vulnerability
Añadido a KEV
25 may 2022
Remediar antes de
15 jun 2022
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
Acción requerida
The impacted product is end-of-life and should be disconnected if still in use.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2013-0074
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
- www.us-cert.govhttp://www.us-cert.gov/ncas/alerts/TA13-071A
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565
- www.us-cert.govhttp://www.us-cert.gov/ncas/alerts/TA13-071A
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0074