Microsoft Internet Explorer 5.0.1 - Vector Markup Language 'VGX.dll' Remote Buffer Overflow
🗓️ 14 Aug 2007 00:00:00Reported by Ben Nagy & Derek SoederType 
exploitdb🔗 www.exploit-db.com👁 29 Views
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Microsoft Internet Explorer Vector Markup Language VGX Buffer Overflow (CVE-2007-1749) | 26 Sep 201000:00 | – | checkpoint_advisories |
 | CVE-2007-1749 | 14 Aug 200722:00 | – | cve |
 | CVE-2007-1749 | 14 Aug 200722:00 | – | cvelist |
 | CVE-2007-1749 | 14 Aug 200722:17 | – | nvd |
 | Microsoft Windows Vector Markup Language Buffer Overflow (938127) | 8 Jul 201000:00 | – | openvas |
| Microsoft Windows Vector Markup Language Buffer Overflow (938127) | 8 Jul 201000:00 | – | openvas |
 | Integer overflow | 14 Aug 200722:17 | – | prion |
 | Microsoft Security Bulletin MS07-050 - Critical Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127) | 15 Aug 200700:00 | – | securityvulns |
| Microsoft Windows VML parsing buffer overflow | 15 Aug 200700:00 | – | securityvulns |
 | MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127) | 14 Aug 200700:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/25310/info
Microsoft Internet Explorer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
This issue occurs when rendering VML (Vector Markup Language) graphics.
Attackers can leverage this issue to execute arbitrary code in the context of the currently logged-in user.
Successful attacks may facilitate the remote compromise of affected computers. Failed attacks will likely cause denial-of-service conditions.
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious HTML document.
A VML document containing the following construct pointing to a malicious compressed image file will trigger this issue:
<v:rect>
<v:imagedata src="http://www.example.com/compressed.emz">
</v:rect>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Dec 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.41547