Microsoft Silverlight Null Pointer CVE-2013-3178 Remote Code Execution Vulnerability

Bugtraq ID:	60938
Class:	Design Error
CVE:	CVE-2013-3178
Remote:	Yes
Local:	No
Published:	Jul 09 2013 12:00AM
Updated:	Mar 19 2015 08:12AM
Credit:	Vitaliy Toropov
Vulnerable:	Microsoft Silverlight 5.0 Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Conferencing Standard Edition 6.0 SP1 Avaya Conferencing Standard Edition 6.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya CallPilot 0
Not Vulnerable:

Microsoft Silverlight Null Pointer CVE-2013-3178 Remote Code Execution Vulnerability

Microsoft Silverlight is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition.

Microsoft Silverlight Null Pointer CVE-2013-3178 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Silverlight Null Pointer CVE-2013-3178 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Silverlight Null Pointer CVE-2013-3178 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Silverlight Homepage (Microsoft)