Detections
Analytics
MS13-052: Vulnerability in Silverlight Could Allow Remote Code Execution (2861561) (Mac OS X)
high Nessus Plugin ID 67208
Language:
Synopsis
A multimedia application framework installed on the remote Mac OS X host is affected a remote code execution vulnerability.Description
The version of Microsoft Silverlight installed on the remote host reportedly handles a dereference to a NULL pointer incorrectly.If an attacker could trick a user on the affected system into visiting a website hosting a malicious Silverlight application, the attacker could leverage this vulnerability to execute arbitrary code on the affected system, subject to the user's privileges.
Solution
Microsoft has released a patch for Silverlight 5.See Also
http://technet.microsoft.com/en-us/security/bulletin/ms13-052
Plugin Details
Severity: High
ID: 67208
File Name: macosx_ms13-052.nasl
Version: 1.7
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 7/10/2013
Updated: 7/14/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:silverlight
Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, MacOSX/Silverlight/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 7/9/2013
Vulnerability Publication Date: 7/9/2013
Reference Information
CVE: CVE-2013-3178
BID: 60938