#Enable microsoft silverlight in firefox update#

The update addresses the vulnerability by modifying functionality to maintain the integrity of DEP (Data Execution Prevention) and Address Space Layout Randomization (ASLR) in Silverlight. The security update upgrades previous versions of Silverlight to Silverlight version 4.0, which is the first version of Silverlight 5 that is not affected by the vulnerability. For more information, see the subsection, Affected and Non-Affected Software, in this section. This security update is rated Important for Microsoft Silverlight 5 and Microsoft Silverlight 5 Developer Runtime when installed on Mac and all supported releases of Microsoft Windows. It could also be possible to display specially crafted web content by using banner advertisements or by using other methods to deliver web content to affected systems.

Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger message that takes them to the attacker's website. In all cases, however, an attacker would have no way to force users to visit a website. The vulnerability could allow security feature bypass if an attacker hosts a website that contains specially crafted Silverlight content that is designed to exploit the vulnerability, and then convinces a user to view the website. This security update resolves a privately reported vulnerability in Microsoft Silverlight.

Version: 1.0 General Information Executive Summary In this article Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)

Enable microsoft silverlight in firefox