Signature Detail

HTTP: Microsoft Silverlight Memory Corruption Vulnerability

This signature detects an attempt to exploit a known vulnerability in Microsoft Silverlight. An attacker can create a malicious Web-page, that, when viewed by a user, can result in a remote code execution on the user's computer.

Extended Description

Microsoft Silverlight ActiveX control is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control.

Affected Products

• Microsoft Silverlight 3.0

References

• BugTraq: 42138
• CVE: CVE-2010-0019
• URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx