Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)

and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...