VMLFill.Exploit uses a vulnerability in the Vector Markup Language(VML), which is used by the internet explorer to display graphics made in VML. This could allow remote code execution as explained in the Microsoft Security Advisory 925568. All computers running Windows operating systems are vulnerable to this exploit.

Once the malicious graphic file which is specially crafted to exploit this vulnerability is viewed using Internet Explorer, the embedded code can be executed. This way of infection can also terminate Internet Explorer without user interaction.

The malicious graphic file can be a banner or an advertisement image in a Website or HTML e-mail message.

This exploit was discovered on September 21, 2006.