CVE-2007-1749

CRITICO 9.3CVE-2007-1749 · Published 14/08/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 5.01= 6= 7`	No fix yet

Description

Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.

References

research.eeye.com/html/advisories/published/AD20070814a.html
secunia.com/advisories/26409 · Patch
securityreason.com/securityalert/3020
kb.cert.org/vuls/id/468800 · US Government Resource
securityfocus.com/archive/1/476498/100/0/threaded
securityfocus.com/bid/25310 · Patch
securitytracker.com/id
us-cert.gov/cas/techalerts/TA07-226A.html · US Government Resource
vupen.com/english/advisories/2007/2874
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-050
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1784

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free