Cloudanix VulnDB

CVE-2013-0074

High · 7.8 CISA KEV · ransomware

CVSS

7.8

EPSS

78.9%

Published

Mar 13, 2013

CISA due date

Jun 15, 2022

The record

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."

Affected packages

Ecosystem Package Introduced Fixed