CVE

Id
25106  
CVE No.
CVE-2007-1749  
Status
Candidate  
Description
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.  
Phase
Assigned (20070329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249886 25106 CVE-2007-1749 BUGTRAQ:20070814 EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability  View
249887 25106 CVE-2007-1749 URL:http://www.securityfocus.com/archive/1/archive/1/476498/100/0/threaded  View
249888 25106 CVE-2007-1749 MISC:http://research.eeye.com/html/advisories/published/AD20070814a.html  View
249889 25106 CVE-2007-1749 MS:MS07-050  View
249890 25106 CVE-2007-1749 URL:http://www.microsoft.com/technet/security/bulletin/ms07-050.mspx  View
249891 25106 CVE-2007-1749 CERT:TA07-226A  View
249892 25106 CVE-2007-1749 URL:http://www.us-cert.gov/cas/techalerts/TA07-226A.html  View
249893 25106 CVE-2007-1749 CERT-VN:VU#468800  View
249894 25106 CVE-2007-1749 URL:http://www.kb.cert.org/vuls/id/468800  View
249895 25106 CVE-2007-1749 BID:25310  View
249896 25106 CVE-2007-1749 URL:http://www.securityfocus.com/bid/25310  View
249897 25106 CVE-2007-1749 VUPEN:ADV-2007-2874  View
249898 25106 CVE-2007-1749 URL:http://www.vupen.com/english/advisories/2007/2874  View
249899 25106 CVE-2007-1749 OVAL:oval:org.mitre.oval:def:1784  View
249900 25106 CVE-2007-1749 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1784  View
249901 25106 CVE-2007-1749 SECTRACK:1018568  View
249902 25106 CVE-2007-1749 URL:http://www.securitytracker.com/id?1018568  View
249903 25106 CVE-2007-1749 SECUNIA:26409  View
249904 25106 CVE-2007-1749 URL:http://secunia.com/advisories/26409  View
249905 25106 CVE-2007-1749 SREASON:3020  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51780 JVNDB-2007-000443 Microsoft Internet Explorer における初期化されていないオブジェクトの参照によるメモリ破壊の脆弱性 Microsoft Internet Explorer には、初期化されていないオブジェクトや削除されたオブジェクトを参照することで発生するメモリ破壊の脆弱性が存在します。 CVE-2007-1751 25106 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000443.html  View