296,223
Total vulnerabilities in the database
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| microsoft / internet_explorer | 7 | 7.x |
| microsoft / internet_explorer | 6 | 6.x |
| microsoft / internet_explorer | 5.01 | 5.01.x |