Microsoft Internet Explorer Vector Markup Language Buffer Overflow Vulnerability

Risk
High

Date Discovered
9/19/2006 12:00:00 AM

Description
Microsoft Internet Explorer is prone to a buffer-overflow vulnerability. The vulnerability arises because of an error in the processing of Vector Markup Language documents. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. The method by which this vulnerability is currently being exploited will typically terminate Internet Explorer. This vulnerability is currently being exploited in the wild as Trojan.Vimalov. This vulnerability affects Internet Explorer version 6.0 on a fully patched system. Previous versions may also be affected.

More Information on Symantec

---