1. CVE-Search
  2. CVE-2013-0074
ID CVE-2013-0074
Summary Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:silverlight:4.0.50401.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.50401.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.50524.00:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.50524.00:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.50826.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.50826.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.50917.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.50917.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.51204.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.51204.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.60129.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.60129.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.60310.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.60310.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.60531.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.60531.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.60831.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.60831.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.0.603310.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.0.603310.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.1.10111:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.1.10111:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:4.1.10111.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:4.1.10111.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:5.0.60818.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:5.0.60818.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:silverlight:5.0.61118.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:silverlight:5.0.61118.0:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 22-09-2021 - 14:22)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
msbulletin via4
bulletin_id MS13-022
bulletin_url
date 2013-03-12T00:00:00
impact Remote Code Execution
knowledgebase_id 2814124
knowledgebase_url
severity Critical
title Vulnerability in Silverlight Could Allow Remote Code Execution
oval via4
  • accepted 2014-04-07T04:02:00.457-04:00
    class vulnerability
    contributors
    • name SecPod Team
      organization SecPod Technologies
    • name Shane Shaffer
      organization G2, Inc.
    • name Maria Mikhno
      organization ALTX-SOFT
    definition_extensions
    comment Microsoft Silverlight 5 is installed
    oval oval:org.mitre.oval:def:15148
    description Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
    family windows
    id oval:org.mitre.oval:def:16516
    status accepted
    submitted 2013-03-14T10:20:37
    title Double dereference vulnerability in Microsoft Silverlight - MS13-022
    version 8
  • accepted 2013-04-29T04:17:16.198-04:00
    class vulnerability
    contributors
    name SecPod Team
    organization SecPod Technologies
    definition_extensions
    comment Microsoft Silverlight 5 is installed
    oval oval:org.mitre.oval:def:16072
    description Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
    family macos
    id oval:org.mitre.oval:def:16565
    status accepted
    submitted 2013-03-14T10:20:37
    title Double dereference vulnerability in Microsoft Silverlight - MS13-022 (Mac OS X)
    version 4
refmap via4
cert TA13-071A
Last major update 22-09-2021 - 14:22
Published 13-03-2013 - 00:55
Last modified 22-09-2021 - 14:22
Back to Top