Microsoft Silverlight 5 and 5 Developer Runtime before 5.1.20125.0 does not properly validate pointers during HTML object rendering which allows remote attackers to execute arbitrary code via a crafted Silverlight application aka \Silverlight Double Dereference Vulnerability.\