Microsoft-Silverlight 漏洞

高危CVE-2015-16712015/05/13

CVE-2015-1671

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

MicrosoftLyncSIP Windows7 Windows-Server-2003RCE

CVSS7.8EPSS 74.1%

中危CVE-2013-38962013/10/09

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

Microsoft-SilverlightRCE

CVSS5.5EPSS 80.3%

高危CVE-2013-00742013/03/13

CVE-2013-0074

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."

Microsoft-SilverlightRCE

CVSS7.8EPSS 93.1%

Microsoft-Silverlight

关联漏洞

CVE-2015-1671

CVE-2013-3896

CVE-2013-0074