PT-2016-5430

CVE-2016-3367

·

Published

2016-09-14

·

Updated

2018-10-12

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 5.1.50709.0
Description The issue is related to improper memory allocation for string-insert and string-append operations in StringBuilder. This allows remote attackers to execute arbitrary code via a crafted web site.
Recommendations For versions prior to 5.1.50709.0, update to version 5.1.50709.0 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2016-3367
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com