CVE-2013-0074

KEV · Ransomware

Microsoft Silverlight Double Dereference Vulnerability

Vendor / Project: Microsoft
Product: Silverlight
Date added: May 25, 2022
Due date: Jun 15, 2022
Known ransomware use: Known
CWEs: —

Description

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-0074