Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-0034 Details

Description

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CNA: CISA-ADPCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0034 CISA-ADPUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-006 CVEPatchVendor Advisory
http://www.securitytracker.com/id/1034655 CVEBroken LinkThird Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-006 [email protected]PatchVendor Advisory
http://www.securitytracker.com/id/1034655 [email protected]Broken LinkThird Party AdvisoryVDB Entry

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability NameDate AddedDue DateRequired Action
Microsoft Silverlight Runtime Remote Code Execution VulnerabilityMay 25, 2022Jun 15, 2022The impacted products are end-of-life and should be disconnected if still in use.

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
microsoft silverlight
>= 5.0, < 5.1.41212.0

CPE

  • cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

18 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2016-0034
NVD Published Date:
Jan 13, 2016
NVD Last Modified:
Aug 14, 2026
Source:
[email protected]
CVE-2016-0034 Details - Not Deferred