CVE-2016-3367 | BDVDB-2026-78056 Detail

Description#

StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote attackers to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-109
http://www.securitytracker.com/id/1036795
http://www.securityfocus.com/bid/92837

Exploit#

No public exploit known

History#

Version 12016-09-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.