{"uuid": "6072380e-fab5-4874-be4a-384128871120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0074", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_022_silverlight_script_object.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"James Forshaw\", \"Vitaliy Toropov\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Microsoft Silverlight. The vulnerability exists on\\n          the Initialize() method from System.Windows.Browser.ScriptObject, which access memory in an\\n          unsafe manner. Since it is accessible for untrusted code (user controlled) it's possible\\n          to dereference arbitrary memory which easily leverages to arbitrary code execution. In order\\n          to bypass DEP/ASLR a second vulnerability is used, in the public WriteableBitmap class\\n          from System.Windows.dll. This module has been tested successfully on IE6 - IE10, Windows XP\\n          SP3 / Windows 7 SP1.\", \"disclosure_date\": \"2013-03-12\", \"fullname\": \"exploit/windows/browser/ms13_022_silverlight_script_object\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-022 Microsoft Silverlight ScriptObject Unsafe Memory Access\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms13_022_silverlight_script_object.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ms13_022_silverlight_script_object\", \"references\": [\"CVE-2013-0074\", \"CVE-2013-3896\", \"OSVDB-91147\", \"OSVDB-98223\", \"BID-58327\", \"BID-62793\", \"MSB-MS13-022\", \"MSB-MS13-087\", \"PACKETSTORM-123731\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows x86/x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:10.222061Z"}