CVE-2007-0024
HIGH 9.3EPSS 44.2%
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 44.19% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2007-01-09
- Updated
- 2024-08-07
Proof-of-concept exploits (2)
- http://www.securityfocus.com/archive/1/457053/100/0/threaded
- http://www.securityfocus.com/archive/1/457164/100/0/threaded
ExploitDB entries (2)
Security advisories
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=462
- http://secunia.com/advisories/23677
- http://securitytracker.com/id?1017489
- http://support.microsoft.com/?kbid=929969
- http://www.kb.cert.org/vuls/id/122084
- http://www.osvdb.org/31250
- http://www.securityfocus.com/bid/21930
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-004