CVE-2015-1715
HighSummary
Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application.
Risk Assessment
Attackers can exploit this vulnerability to execute malicious code with elevated privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update Microsoft Silverlight to version 5.1.40416.00 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft Silverlight 5
See all- CVE-2016-3367High
Microsoft Silverlight 5 before version 5.1.50709.0 has a memory allocation issue in string-insert and string-append operations, which can lead to memory corruption.
- CVE-2015-6166High
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified open and close requests, known as 'Microsoft Silverlight RCE Vulnerability.'
- CVE-2014-0319High
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Original NVD description (English source)
Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application, aka "Microsoft Silverlight Out of Browser Application Vulnerability."