Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:silverlight:5.1.20125.0:*:*:*:*:*:*:*

part: a version: 5.1.20125.0 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSilverlight (1419407f-14bd-5ea4-85da-8a27e216ef9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0319 vulnerable 2026-06-08 05:05:12.573740 Details available
Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka "Silverlight DEP/ASLR Bypass Vulnerability."
Published: 2014-03-12T01:00:00.000Z
Updated: 2024-08-06T09:13:10.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3178 vulnerable 2026-06-08 05:04:30.287964 Details available
Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka "Null Pointer Vulnerability."
Published: 2013-07-10T01:00:00.000Z
Updated: 2024-08-06T16:00:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3131 vulnerable 2026-06-08 05:04:30.217299 Details available
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
Published: 2013-07-10T01:00:00.000Z
Updated: 2024-08-06T16:00:09.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3129 vulnerable 2026-06-08 05:04:30.208617 Details available
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
Published: 2013-07-10T01:00:00.000Z
Updated: 2025-01-16T20:26:50.042Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.