ByteOS Network

Source-secure@microsoft.com

Published At-09 May, 2012 | 00:55

Updated At-11 Apr, 2025 | 00:51

Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "Silverlight Double-Free Vulnerability."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>silverlight>>4.0.50401.0

cpe:2.3:a:microsoft:silverlight:4.0.50401.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50524.00

cpe:2.3:a:microsoft:silverlight:4.0.50524.00:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50826.0

cpe:2.3:a:microsoft:silverlight:4.0.50826.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50917.0

cpe:2.3:a:microsoft:silverlight:4.0.50917.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.51204.0

cpe:2.3:a:microsoft:silverlight:4.0.51204.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60129.0

cpe:2.3:a:microsoft:silverlight:4.0.60129.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60310.0

cpe:2.3:a:microsoft:silverlight:4.0.60310.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60531.0

cpe:2.3:a:microsoft:silverlight:4.0.60531.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60831.0

cpe:2.3:a:microsoft:silverlight:4.0.60831.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.603310.0

cpe:2.3:a:microsoft:silverlight:4.0.603310.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.1.10111

cpe:2.3:a:microsoft:silverlight:4.1.10111:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.1.10111.0

cpe:2.3:a:microsoft:silverlight:4.1.10111.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/49122	secure@microsoft.com	N/A
http://www.securityfocus.com/bid/53360	secure@microsoft.com	N/A
http://www.securitytracker.com/id?1027040	secure@microsoft.com	N/A
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	secure@microsoft.com	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15574	secure@microsoft.com	N/A
http://secunia.com/advisories/49122	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/53360	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027040	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15574	af854a3a-2127-422b-91ae-364da2661108	N/A