CVE-2007-1749: Buffer Overflow
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1749?
CVE-2007-1749 is classified as a critical vulnerability that allows remote code execution due to an integer underflow in Internet Explorer.
How do I fix CVE-2007-1749?
To fix CVE-2007-1749, users should update their Internet Explorer to the latest version available, as Microsoft has released patches addressing this vulnerability.
Which versions of Internet Explorer are affected by CVE-2007-1749?
CVE-2007-1749 affects Internet Explorer versions 5.01, 6, and 7.
What kind of attack can be executed through CVE-2007-1749?
An attacker can exploit CVE-2007-1749 to execute arbitrary code on the affected system by sending specially crafted compressed content.
What component of Internet Explorer contains the vulnerability CVE-2007-1749?
CVE-2007-1749 is found in the Vector Markup Language (VML) component of Internet Explorer, specifically within the CDownloadSink class.