QwikSec

Security Database

CVE

CWE

Training

CVE-2007-1749

Published: Aug 14, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

http://research.eeye.com/html/advisories/published/AD20070814a.html

x_refsource_MISC

third-party-advisory

x_refsource_CERT

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_MS

oval:org.mitre.oval:def:1784

vdb-entry

signature

x_refsource_OVAL

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SREASON

20070814 EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.