We can expect this CVE to be integrated into other exploit kits soon, so it is important to make sure you patch all your machines now.Įven if you don’t watch Netflix, you may have installed Silverlight in the past and forgotten about it.
#INSTALL SILVERLIGHT ON RT INSTALL#
Please ensure that you are running the latest version available (3.0) and that it is set to install updates automatically: However, those that already have and older version of Silverlight can still watch Netflix and may not be aware that their computers are at risk. Just follow the instructions to get started,” prompted Netflix.įortunately, those that do not have the plugin yet will be redirected to download the latest (and safe) version. “If you do not already have Microsoft Silverlight plug-in installed, you will be prompted to download and install the free plug-in for your web browser. If you want to watch Netflix on your PC, you will need to use Silverlight. That’s about 40 million potential victims for the Silverlight exploit in Angler EK.
The Silverlight web plugin is not installed by default but is required to view content on certain websites.Īs pointed out by Timo Hirvonen, Netflix, which has 40 million subscribers, requires Silverlight for its paid streaming video service. If the conditions are right, a specially crafted library is triggered to exploit the Silverlight vulnerability.Īs with all exploit kits, leveraging vulnerabilities is just an intermediary step for the real motive: pushing malware to the victims’ machine. Upon landing on the exploit page, the Angler exploit kit will determine if Silverlight is installed and what version is running.
0 kommentar(er)
