Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-0024
HistoryJan 09, 2007 - 11:28 p.m.

CVE-2007-0024

2007-01-0923:28:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
45
cve-2007-0024
vml
microsoft
internet explorer
buffer overflow
security vulnerability

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%

JSON

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the “VML Buffer Overrun Vulnerability.”

Related

saint 4
canvas 1
securityvulns 3
cert 1
cvelist 2
prion 2
openvas 2
checkpoint_advisories 2
nessus 1
cve 1
saint
saint
Internet Explorer VML integer overflow
2007-02-07 00:00:00
Internet Explorer VML integer overflow
2007-02-07 00:00:00
Internet Explorer VML integer overflow
2007-02-07 00:00:00
canvas
canvas
Immunity Canvas: MS07_004
2007-01-09 23:28:00
securityvulns
securityvulns
Microsoft Security Bulletin MS07-004 Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)
2007-01-09 00:00:00
Microsoft VML buffer overflow
2007-01-09 00:00:00
[Full-disclosure] iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability
2007-01-09 00:00:00
cert
cert
Microsoft Internet Explorer VML buffer overflow
2007-01-09 00:00:00
cvelist
cvelist
CVE-2007-0024
2007-01-09 23:00:00
CVE-2010-1179
2010-03-29 19:00:00
prion
prion
Integer overflow
2007-01-09 23:28:00
Design/Logic Flaw
2010-03-29 19:30:00
openvas
openvas
Microsoft Windows Vector Markup Language Vulnerabilities (929969)
2010-07-08 00:00:00
Microsoft Windows Vector Markup Language Vulnerabilities (929969)
2010-07-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer VML Buffer Overrun (MS07-004; CVE-2007-0024)
2007-01-09 00:00:00
Internet Explorer VML Buffer Overrun (MS07-004) - Ver2 (CVE-2007-0024)
2014-04-16 00:00:00
nessus
nessus
MS07-004: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (929969)
2007-01-09 00:00:00
cve
cve
CVE-2010-1179
2010-03-29 19:30:00

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%

JSON
Related for CVE-2007-0024
saint4canvas1securityvulns3cert1cvelist2prion2openvas2checkpoint_advisories2nessus1cve1