StringBuilder in Microsoft Silverlight 5 prior to 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remote malicious users to execute arbitrary code via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
microsoft silverlight 5.0 |