9.3

CVE-2007-0024

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Internet Explorer Version5.01 Updatesp4
   Microsoft ≫ Windows 2000 Updatesp4
Microsoft ≫ Ie Version6.0 Updatesp1
   Microsoft ≫ Windows 2000 Updatesp4
Microsoft ≫ Internet Explorer Version7.0
   Microsoft ≫ Windows Xp Edition64-bit
   Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Internet Explorer Version7.0
   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows 2003 Server Edition64-bit
   Microsoft ≫ Windows 2003 Server Editionitanium
   Microsoft ≫ Windows 2003 Server Versionsp1
   Microsoft ≫ Windows 2003 Server Versionsp1 Editionitanium
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 45.82% 0.976
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://www.kb.cert.org/vuls/id/122084
Patch
US Government Resource