Skip to content
OpenAdvisories
Unscored CVE-2011-1266 EUVD-2011-1274GHSA-cmgw-p9p8-rg4v

The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in m…

Published Jun 16, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "VML Memory Corruption Vulnerability."

References