CVE-2014-0319
HighSummary
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Risk Assessment
Bypassing these protection mechanisms may lead to an increased risk of exploiting security vulnerabilities, potentially resulting in unauthorized access to the system.
Recommendation
It is recommended to update Microsoft Silverlight to version 5.1.30214.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Microsoft Silverlight 5
See all- CVE-2016-3367High
Microsoft Silverlight 5 before version 5.1.50709.0 has a memory allocation issue in string-insert and string-append operations, which can lead to memory corruption.
- CVE-2015-6166High
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified open and close requests, known as 'Microsoft Silverlight RCE Vulnerability.'
- CVE-2015-1715High
Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application.
Original NVD description (English source)
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."