Vulnerability in N/a

CVE-2007-1749

Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid…

EPSS: 0.785 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

25310 (vdb-entry, x_refsource_BID)
26409 (x_refsource_SECUNIA, third-party-advisory)
research.eeye.com/html/advisories/published/AD20070814a.html (x_refsource_MISC)
TA07-226A (x_refsource_CERT, third-party-advisory)
1018568 (vdb-entry, x_refsource_SECTRACK)
MS07-050 (x_refsource_MS, vendor-advisory)
oval:org.mitre.oval:def:1784 (signature, x_refsource_OVAL, vdb-entry)
ADV-2007-2874 (vdb-entry, x_refsource_VUPEN)
3020 (x_refsource_SREASON, third-party-advisory)
20070814 EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability (mailing-list, x_refsource_BUGTRAQ)