CVE-2007-0038
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.
- Affected products
- Windows
- Microsoft Windows 2000
- All versions
- Microsoft Windows 2003 Server
- = gold, SP1, SP2
- Microsoft Windows Vista
- All versions
- Microsoft Windows Xp
- All versions
- CVSS 2.0
- 9.3 HIGH
- EPSS
- 72.9% (99th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2007-03-30
CVE-2007-0038 at NVD
27 known exploits for CVE-2007-0038
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2007-0038
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)
Windows ANI LoadAniIcon() Chunk Size Stack Overflow (HTTP)
Windows ANI LoadAniIcon() Chunk Size Stack Overflow (SMTP)
Microsoft Windows - Animated Cursor Stack Overflow
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)
Microsoft Windows - Animated Cursor '.ani' Local Overflow
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Microsoft Windows Explorer - '.ANI' File Denial of Service
Windows Animated Cursor Header buffer overflow
Windows Animated Cursor Header buffer overflow
Windows Animated Cursor Header buffer overflow
Windows Animated Cursor Header buffer overflow
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Microsoft Windows - Animated Cursor '.ani' Universal Generator
ani_loadimage_chunksize-email.rb.txt
ani_loadimage_chunksize-browser.rb.txt
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)
Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow
Immunity Canvas: ANI_CURSOR