VML.A
Threat LevelDamageDistribution

Effects 

VML.A is a malicious code used to exploit a vulnerability in the library VGX.DLL on Windows 2003/XP/2000 computers. This library is used by Internet Explorer in order to display graphics made in VML, Vector Markup Language.

If the target computer is vulnerable, VML.A allows arbitrary code to be executed in it.

If your Panda solution detects VML.A, it does not necessarily mean that your computer is vulnerable to VML.A. It warns the user of the presence of a malicious file attempting to exploit the vulnerability.

If you have a Windows 2003/XP computer or Internet Explorer versions 5.01 and 6 on Windows 2000, it is recommendable to download and apply the security patch referred to the Vector Markup Language vulnerability, which is included in the security bulletin MS06-055. Click here to access the web page for downloading the patch.

Means of transmission 

The vulnerability can be exploited by creating a specially crafted file and then distributing it using any means: for example, hosting it in a web page and enticing users into accessing it or sending it in an email message.