Gravité: : Élevé
  Identifiant(s) CVE: : CVE-2013-3896
  Date du conseil: 09 octobre 2013

  Description

This security update resolves a privately reported vulnerability in Microsoft Silverlight. The vulnerability could allow information disclosure if an attacker hosts a website that contains a specially crafted Silverlight application that is designed to exploit this vulnerability and then convinces a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements.�

Such websites could contain specially crafted content that could exploit this vulnerability. In all cases, however, an attacker would have no way to force users to visit a website. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger message that takes them to the attacker's website. It could also be possible to display specially crafted web content by using banner advertisements or by using other methods to deliver web content to affected systems.

  Solutions

  Affected software and version:

  • Microsoft Silverlight 5 when installed on Mac
  • Microsoft Silverlight 5 Developer Runtime when installed on Mac
  • Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows clients
  • Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows clients
  • Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows servers
  • Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows servers