Kaspersky Lab has discovered a dangerous zero-day vulnerability in Silverlight, potentially placing millions of users at risk.
In a blog post on Wednesday, the cybersecurity firm said the vulnerability would allow an attacker to gain full access to a compromised computer and execute malicious code to steal secret information, conduct surveillance and cause wholesale destruction if they so wished.
Silverlight is a web application framework developed by Microsoft for supporting and displaying information-rich content on the Web. Used by millions of PC owners worldwide across different operating systems, it is not common for security flaws in the framework to be reported -- but vulnerabilities could prove calamitous.
The vulnerability, CVE-2016-0034, was discovered after Ars Technica revealed an alleged link between exploit and surveillance tool seller Hacking Team and Vitaliy Toropov, an independent exploit-writer...
Read more: Kaspersky Lab discovers Silverlight zero-day vulnerability | ZDNet
Thanks Brink.
I received a Microsoft Silver light update yesterday as part of Jan 2016 updates. It's KB3126036, so I wonder if this is in response to the Kaspersky disclosure.
Last edited by Ranger4; 13 Jan 2016 at 22:54. Reason: Needed spelling correction
I too received that today, as an optional update on both my machines, having already removed Silverlight from the only one that ever had it installed. When I uninstalled Silverlight I had a succession of updates from 2012 trying to re-install it but I hid those, as I have hidden KB3126036.
Haven't had it installed for over 6 months now, along with flash and java. It's not something I need on my pc. Certainly doesn't affect my day to day activities.
Last time I tried to run Sky TV on my computer so I could watch the cricket on one screen while doing stuff on another I found that it required Silverlight. I don't know if it still does, I didn't bother to try in the end.
Netflix requires Silverlight unfortunately, so while I don't need it on my gaming pc, or on my work pc its a must have for my media server.
Quote