Skip to content

CVE-2016-0034 Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption)....

HighCVSS 8.8 EPSS 69.4% CISA KEV added 2022-05-25 · due 2022-06-15 Ransomware Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."

CISA Known Exploited Vulnerability

Date added
2022-05-25
Due date (FCEB)
2022-06-15
Ransomware use
Known

Required action

The impacted products are end-of-life and should be disconnected if still in use.

Affected products

ProductAffected versionsFixed in
Microsoft silverlight >= 5.0, < 5.1.41212.0 5.1.41212.0

References

  • 1034655 broken-link third-party-advisory vdb-entry
  • MS16-006 patch vendor-advisory
  • www.cisa.gov government-resource us-government-resource