[PCWorks] Microsoft Silverlight Common Language Runtime Vulnerability

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Wed, 14 Oct 2009 05:58:51 -0500

TITLE:
Microsoft Silverlight Common Language Runtime Vulnerability

Critical:  Highly critical
Impact:  System access
Where:  From remote
Solution Status:  UNPATCHED, Upgrade to Microsoft Silverlight 3

SECUNIA ADVISORY ID: SA37008

VERIFY ADVISORY:
http://secunia.com/advisories/37008/

DESCRIPTION:
A vulnerability has been reported in Microsoft Silverlight, 
which can
be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the Common 
Language
Runtime (CLR) and can be exploited to execute arbitrary code.

For more information see vulnerability #3 in: SA37006

SOLUTION:
Upgrade to Microsoft Silverlight 3.
http://www.microsoft.com/silverlight/get-started/install/default.aspx

ORIGINAL ADVISORY:
MS09-061 (KB974378, KB970363):
http://www.microsoft.com/technet/security/bulletin/MS09-061.mspx

OTHER REFERENCES:
SA37006:
http://secunia.com/advisories/37006/


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts:

  • » [PCWorks] Microsoft Silverlight Common Language Runtime Vulnerability - Clint Hamilton-PCWorks Admin