CVE-2011-1845

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-03 · updated 2026-06-16
Weakness: CWE-399

Description

Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element.

Affected products

Microsoft Silverlight: through 4.0.60129.0; 2.0.31005.00, 2.0.40115.00, 3.0.40624.00, 3.0.40723.0, 3.0.40818.0, 3.0.50106.0

References

http://isc.sans.edu/diary.html?storyid=10747
http://support.microsoft.com/kb/2526954
http://isc.sans.edu/diary.html?storyid=10747
http://support.microsoft.com/kb/2526954

Get alerted when CVE-2011-1845 or the next vulnerability affects your stack