Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-0016.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-0074 (incorrectly referenced as CVE-2012-0016 in the query) in Microsoft Silverlight by leveraging unsafe memory access in the Initialize() method of System.Windows.Browser.ScriptObject, combined with an info leak in WriteableBitmap to bypass DEP/ASLR. It delivers a malicious XAP file to achieve remote code execution on vulnerable IE browsers.
Description
Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or .DESIGN file, aka "Expression Design Insecure Library Loading Vulnerability."
Exploits (1)
This Metasploit module exploits CVE-2013-0074 (incorrectly referenced as CVE-2012-0016 in the query) in Microsoft Silverlight by leveraging unsafe memory access in the Initialize() method of System.Windows.Browser.ScriptObject, combined with an info leak in WriteableBitmap to bypass DEP/ASLR. It delivers a malicious XAP file to achieve remote code execution on vulnerable IE browsers.