CVE-2011-1844

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-03 · updated 2026-06-16
Weakness: CWE-399

Description

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection.

Affected products

Microsoft Silverlight: through 4.0.60129.0; 2.0.31005.00, 2.0.40115.00, 3.0.40624.00, 3.0.40723.0, 3.0.40818.0, 3.0.50106.0

References

http://isc.sans.edu/diary.html?storyid=10747
http://support.microsoft.com/kb/2526954
http://isc.sans.edu/diary.html?storyid=10747
http://support.microsoft.com/kb/2526954

Get alerted when CVE-2011-1844 or the next vulnerability affects your stack