CVE-2007-1749
9.3
CVSS v2.0 Base Score
78.47%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code via compressed content with an invalid buffer size, which triggers a heap-based buffer overflow.
Published: 8/14/2007
Modified: 4/23/2026
Vulnerability Summary
CVSS v2 Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
78.47%HIGH Exploitation Risk
99th percentile
This vulnerability has a 78.47% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other