National Cyber Awareness System

Vulnerability Summary for CVE-2007-0024

Overview

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#122084

Name: VU#122084

Type: Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/122084

US-CERT Technical Alert: TA07-009A

Name: TA07-009A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-009A.html

External Source: XF

Name: ie-vml-record-bo(31287)

Type: Patch Information

Hyperlink:http://xforce.iss.net/xforce/xfdb/31287

External Source: BID

Name: 21930

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/21930

External Source: OSVDB

Name: 31250

Type: Patch Information

Hyperlink:http://www.osvdb.org/31250

External Source: MS

Name: MS07-004

Type: Patch Information

Hyperlink:http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx

External Source: MSKB

Name: 929969

Type: Patch Information

Hyperlink:http://support.microsoft.com/?kbid=929969

External Source: SECTRACK

Name: 1017489

Type: Patch Information

Hyperlink:http://securitytracker.com/id?1017489

External Source: SECUNIA

Name: 23677

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/23677

External Source: IDEFENSE

Name: 20070109 Microsoft Windows VML Element Integer Overflow Vulnerability

Type: Advisory; Patch Information

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=462

External Source: VUPEN

Name: ADV-2007-0129

Hyperlink:http://www.vupen.com/english/advisories/2007/0129

External Source: VUPEN

Name: ADV-2007-0105

Hyperlink:http://www.vupen.com/english/advisories/2007/0105

External Source: HP

Name: SSRT071296

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/457274/100/0/threaded

External Source: HP

Name: SSRT071296

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/457274/100/0/threaded

External Source: BUGTRAQ

Name: 20070117 Re: MS07-004 VML Integer Overflow Exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/457164/100/0/threaded

External Source: BUGTRAQ

Name: 20070116 MS07-004 VML Integer Overflow Exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/457053/100/0/threaded

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-009.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-009.htm

US Government Resource: oval:org.mitre.oval:def:1058

Name: oval:org.mitre.oval:def:1058

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1058

References to Check Content

Identifier:oval:org.mitre.oval:def:1058

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1058