CVE-2015-6166
HighSummary
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified open and close requests, known as 'Microsoft Silverlight RCE Vulnerability.'
Risk Assessment
This vulnerability may lead to serious security incidents, including system takeover or disruption of service.
Recommendation
It is recommended to update Microsoft Silverlight to version 5.1.41105.00 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft Silverlight 5
See all- CVE-2016-3367High
Microsoft Silverlight 5 before version 5.1.50709.0 has a memory allocation issue in string-insert and string-append operations, which can lead to memory corruption.
- CVE-2015-1715High
Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application.
- CVE-2014-0319High
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Original NVD description (English source)
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read or write access) via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."