VulnerabilityModified

CVE-2007-1765

EXPLOIT ×11 ✓HIGH 9.3EPSS 54.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 54.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 54.85% probability · 99th percentile
Public exploits: 11 in Exploit-DB · verified · first 31 March 2007
CISA KEV: Not listed
Affected: microsoft/windows 2000 · microsoft/windows 2003 server · microsoft/windows vista · microsoft/windows xp · avaya/ip600 media servers · microsoft/ie · microsoft/internet explorer · avaya/definity one media server · avaya/s3400 · avaya/s8100
Source: cve@mitre.org

EPSS trend

EPSS 54.9% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (11)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-16698 source ↗	Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)windows · Metasploit	remote	20 September 2010	yes
EDB-4045 source ↗	Microsoft Windows - Animated Cursor Stack Overflowwindows · RISE Security	remote	7 June 2007	yes
EDB-3695 source ↗	Microsoft Windows - Animated Cursor '.ani' Local Overflowwindows · Breno Silva Pinto	local	9 April 2007	yes
EDB-3684 source ↗	Microsoft Windows Explorer - '.ANI' File Denial of Servicewindows · Marsu	dos	8 April 2007	yes
EDB-3652 source ↗	Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)windows · devcode	local	3 April 2007	yes
EDB-3651 source ↗	Microsoft Windows - Animated Cursor '.ani' Universal Generatorwindows · YAG KOHHA	remote	3 April 2007	yes
EDB-3647 source ↗	Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflowwindows · Marsu	local	2 April 2007	yes
EDB-3636 source ↗	Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)windows · jamikazu	remote	1 April 2007	yes
EDB-3635 source ↗	Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)windows · Trirat Puttaraksa	remote	1 April 2007	yes
EDB-3634 source ↗	Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflowwindows · jamikazu	remote	1 April 2007	yes
EDB-3617 source ↗	Microsoft Windows - Animated Cursor '.ani' Local Stack Overflowwindows · devcode	local	31 March 2007	yes

References

http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/Broken Link
http://research.eeye.com/html/alerts/zeroday/20070328.htmlThird Party Advisory
http://vil.nai.com/vil/content/v_141860.htmBroken Link
http://www.avertlabs.com/research/blog/?p=230Third Party Advisory
http://www.avertlabs.com/research/blog/?p=233Third Party Advisory
http://www.microsoft.com/technet/security/advisory/935423.mspxVendor Advisory
http://www.securityfocus.com/archive/1/464287/100/0/threaded
http://www.securityfocus.com/archive/1/464345/100/0/threaded
http://www.securityfocus.com/bid/23194Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017827Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1151Third Party Advisory
http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/Broken Link
http://research.eeye.com/html/alerts/zeroday/20070328.htmlThird Party Advisory
http://vil.nai.com/vil/content/v_141860.htmBroken Link
http://www.avertlabs.com/research/blog/?p=230Third Party Advisory
http://www.avertlabs.com/research/blog/?p=233Third Party Advisory
http://www.microsoft.com/technet/security/advisory/935423.mspxVendor Advisory
http://www.securityfocus.com/archive/1/464287/100/0/threaded
http://www.securityfocus.com/archive/1/464345/100/0/threaded
http://www.securityfocus.com/bid/23194Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017827Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1151Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.