CVE-2016-3367
HighSummary
Microsoft Silverlight 5 before version 5.1.50709.0 has a memory allocation issue in string-insert and string-append operations, which can lead to memory corruption.
Risk Assessment
Remote attackers can exploit this vulnerability to execute arbitrary code, posing a significant security threat to systems using this technology.
Recommendation
It is recommended to update Microsoft Silverlight to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft Silverlight 5
See all- CVE-2015-6166High
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified open and close requests, known as 'Microsoft Silverlight RCE Vulnerability.'
- CVE-2015-1715High
Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverlight application.
- CVE-2014-0319High
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Original NVD description (English source)
StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."