NVD

Id
53928  
Name
CVE-2007-1749  
Description
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2011-03-07  
Seq
2007-1749  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273457 53928 CVE-2007-1749 oval:org.mitre.oval:def:1784  View
273458 53928 CVE-2007-1749 http://research.eeye.com/html/advisories/published/AD20070814a.html  View
273459 53928 CVE-2007-1749 3020  View
273460 53928 CVE-2007-1749 VU#468800  View
273461 53928 CVE-2007-1749 MS07-050  View
273462 53928 CVE-2007-1749 20070814 EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability  View
273463 53928 CVE-2007-1749 25310  View
273464 53928 CVE-2007-1749 1018568  View
273465 53928 CVE-2007-1749 TA07-226A  View
273466 53928 CVE-2007-1749 ADV-2007-2874  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51949 JVNDB-2007-000612 Microsoft Internet Explorer の VML コンポーネントにおけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer の Vector Language (VML) コンポーネント (VGX.DLL) における CDownloadSink クラスコードには、整数アンダーフローによるヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-1749 25104 CVE-2007-1749 53928 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000612.html 2007-08-14 2007-08-24 View