Signature Detail

HTTP: Microsoft Silverlight Remote Code Execution

This signature detects an attempt to exploit a known vulnerability in Microsoft Silverlight. An attacker can create a malicious Web-page, that, when viewed by a victim, can result in a remote code execution on the victim's computer.

Extended Description

Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial-of-service condition.

Affected Products

• Avaya Aura Conferencing 6.0 Standard
• Avaya CallPilot 4.0
• Avaya CallPilot 5.0
• Avaya Communication Server 1000 Telephony Manager 3.0
• Avaya Communication Server 1000 Telephony Manager 4.0
• Avaya Meeting Exchange 5.0
• Avaya Meeting Exchange 5.0.0.0.52
• Avaya Meeting Exchange 5.0 SP1
• Avaya Meeting Exchange 5.0 SP2
• Avaya Meeting Exchange 5.1
• Avaya Meeting Exchange 5.1 SP1
• Avaya Meeting Exchange 5.2
• Avaya Meeting Exchange 5.2 SP1
• Avaya Meeting Exchange 5.2 SP2
• Avaya Meeting Exchange - Client Registration Server
• Avaya Meeting Exchange - Recording Server
• Avaya Meeting Exchange - Web Conferencing Server
• Avaya Meeting Exchange - Webportal
• Avaya Messaging Application Server 4
• Avaya Messaging Application Server 5
• Avaya Messaging Application Server 5.2
• Microsoft .NET Framework 1.0
• Microsoft .NET Framework 1.0 Beta2
• Microsoft .NET Framework 1.0 Gold
• Microsoft .NET Framework 1.0 SP1
• Microsoft .NET Framework 1.0 SP2
• Microsoft .NET Framework 1.0 SP3
• Microsoft .NET Framework 1.1
• Microsoft .NET Framework 1.1 Gold
• Microsoft .NET Framework 1.1 SP1
• Microsoft .NET Framework 1.1 Sp1 Sdk
• Microsoft .NET Framework 1.1 SP2
• Microsoft .NET Framework 1.1 SP3
• Microsoft .NET Framework 2.0
• Microsoft .NET Framework 2.0 BETA
• Microsoft .NET Framework 2.0 Gold
• Microsoft .NET Framework 2.0 SP1
• Microsoft .NET Framework 2.0 SP2
• Microsoft .NET Framework 3.0
• Microsoft .NET Framework 3.0 Gold
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5.1
• Microsoft .NET Framework 3.5 SP1
• Microsoft .NET Framework 4.0
• Microsoft .NET Framework 4.0 Beta1
• Microsoft .NET Framework 4.0 beta 2
• Microsoft Silverlight 4.0

References

• BugTraq: 49999
• CVE: CVE-2011-1253