Oval Definition:	oval:org.mitre.oval:def:1784
Revision Date: 2014-02-24 Version: 12 Title: VML Buffer Overrun Vulnerability Description: Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-1749 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Internet Explorer Definition Synopsis IE 5.01,SP4 on Win2k,SP4 Microsoft Windows 2000 SP4 or later is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND the version of vgx.dll is less than 5.0.3854.2500 OR IE 6 on Win 2k, SP4 Microsoft Windows 2000 SP4 or later is installed AND Internet Explorer 6 Service Pack 1 is installed AND the version of vgx.dll is less than 6.0.2800.1599 OR IE 6 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 6 is installed AND Vgx.dll version is less than 6.0.2900.3164 OR IE 7 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Internet Explorer 7 is installed AND the version of vgx.dll is less than 7.0.6000.20628 OR IE 6 on Win XP SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND Microsoft Internet Explorer 6 is installed AND the version of vgx.dll is less than 6.0.3790.2962 OR IE 6 on Win XP SP2 (64-bit) Microsoft Internet Explorer 6 is installed AND Vgx.dll version is less than 6.0.3790.4106 AND Microsoft Windows XP x64 Edition SP2 is installed OR IE 7 on Win XP (64-bit) Software section Microsoft Windows XP SP1 (64-bit) is installed OR Microsoft Windows XP x64 Edition SP2 is installed AND Microsoft Internet Explorer 7 is installed AND the version of vgx.dll is less than 7.0.6000.20628 OR IE 6 on Win S03 SP1 Software section Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 SP1 for Itanium is installed AND Microsoft Internet Explorer 6 is installed AND the version of vgx.dll is less than 6.0.3790.2962 OR IE 6 on Win S03 SP2 Software section Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Internet Explorer 6 is installed AND Vgx.dll version is less than 6.0.3790.4106 OR IE 7 on S03 Windows XP (64-bit,SP1) or Server 2003 (SP1) is installed Microsoft Windows Server 2003 SP1 (x86) is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Internet Explorer 7 is installed AND the version of vgx.dll is less than 7.0.6000.20628 OR IE 7 on Vista Microsoft Windows Vista is installed AND Microsoft Internet Explorer 7 is installed AND the version of vgx.dll is less than 7.0.6000.16513
BACK