CVE-2007-2223
Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.
Date published : 2007-08-14
http://www.securityfocus.com/bid/25301
http://www.securityfocus.com/archive/1/476527/100/0/threaded
