[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-0024Date: (C)2007-01-09   (M)2023-12-22


Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1017489
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=462
http://www.securityfocus.com/archive/1/457053/100/0/threaded
http://www.securityfocus.com/archive/1/457164/100/0/threaded
BID-21930
SECUNIA-23677
OSVDB-31250
MSKB-929969
ADV-2007-0105
ADV-2007-0129
HPSBST02184
MS07-004
TA07-009A
VU#122084
http://support.avaya.com/elmodocs2/security/ASA-2007-009.htm
ie-vml-record-bo(31287)
oval:org.mitre.oval:def:1058

CPE    4
cpe:/a:microsoft:internet_explorer:5.01:sp4
cpe:/o:microsoft:windows_2000::sp4
cpe:/o:microsoft:windows_2003_server
cpe:/o:microsoft:windows_xp::sp2
...
OVAL    1
oval:org.mitre.oval:def:1058

© SecPod Technologies