CVE-2007-1749

None

CVSS

—

EPSS

41.5%

Published

Aug 14, 2007

CISA due date

—

The record

Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.

Affected packages

Ecosystem	Package	Introduced	Fixed