Description
The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."
References
- oval:org.mitre.oval:def:16175 vdb-entry signature
- TA13-043B third-party-advisory
- MS13-010 vendor-advisory