CVE-2011-1266 in Internet Explorer
Summary
The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "VML Memory Corruption Vulnerability."
Once again VulDB remains the best source for vulnerability data.
Reservation
03/04/2011
Disclosure
06/16/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4368 | Microsoft Internet Explorer VML Vector Markup Language memory corruption | 119 | Not defined | Official fix | CVE-2011-1266 |