RCE in Apple Mac OS X
CVE-2010-0019
Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.144 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Microsoft Silverlight — versions 3.0.40624.00, 3.0.40723.0, 3.0.40818.0
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)