CVE-2006-4868

Description

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.

Related CPE's

References

http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html

VU#416092

20096

21989

http://www.microsoft.com/technet/security/advisory/925568.mspx

1016879

http://blogs.securiteam.com/index.php/archives/624

28946

TA06-262A

925486

ADV-2006-3679

ie-vml-bo(29004)

oval:org.mitre.oval:def:100

MS06-055

SSRT061254

20060926 Windows VML security update MS06-055 released

20060924 Windows VML Vulnerability FAQ (CVE-2006-4868) written

20060920 Internet Explorer VML Zero-Day Mitigation

20060920 RE: vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit

20060920 vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit

20060919 Yet another 0day for IE

CvssV3 impact

CvssV2 impact