The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers which allows remote attackers to execute arbitrary code via a crafted web site aka \VML Memory Corruption Vulnerability.\