{"id":"CVE-2007-1765","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-1765","generatedAt":"2026-10-27T17:30:49.974Z","title":"Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing…","description":"Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7.  NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.","published":"2007-03-30T00:19:00.000Z","lastModified":"2026-06-16T22:38:15.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":[],"affected":["microsoft/windows 2000","microsoft/windows 2003 server","microsoft/windows vista","microsoft/windows xp","avaya/ip600 media servers","microsoft/ie","microsoft/internet explorer","avaya/definity one media server","avaya/s3400","avaya/s8100"],"epss":{"score":0.54853,"percentile":0.99017,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":11,"verified":true,"firstPublished":"2007-03-31","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":16698,"kind":"exploit","title":"Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)","url":"https://www.exploit-db.com/exploits/16698","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16698.rb","file":"exploits/windows/remote/16698.rb","published":"2010-09-20","added":"2010-09-20","updated":"2011-03-10","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-1765","CVE-2007-0038","OSVDB-33629","MS07-017"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp"},{"edbId":4045,"kind":"exploit","title":"Microsoft Windows - Animated Cursor Stack Overflow","url":"https://www.exploit-db.com/exploits/4045","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/4045.py","file":"exploits/windows/remote/4045.py","published":"2007-06-07","added":"2007-06-06","updated":"2016-10-05","author":"RISE Security","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-0038","CVE-2007-1765"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3695,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Local Overflow","url":"https://www.exploit-db.com/exploits/3695","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/3695.c","file":"exploits/windows/local/3695.c","published":"2007-04-09","added":"2007-04-08","updated":"2016-09-29","author":"Breno Silva Pinto","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-0038","CVE-2007-1765"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3684,"kind":"exploit","title":"Microsoft Windows Explorer - '.ANI' File Denial of Service","url":"https://www.exploit-db.com/exploits/3684","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/3684.c","file":"exploits/windows/dos/3684.c","published":"2007-04-08","added":"2007-04-07","updated":"2016-09-29","author":"Marsu","type":"dos","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-0038","CVE-2007-1765"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3652,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)","url":"https://www.exploit-db.com/exploits/3652","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/3652.c","file":"exploits/windows/local/3652.c","published":"2007-04-03","added":"2007-04-02","updated":null,"author":"devcode","type":"local","platform":"windows","port":null,"verified":true,"codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3651,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Universal Generator","url":"https://www.exploit-db.com/exploits/3651","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3651.txt","file":"exploits/windows/remote/3651.txt","published":"2007-04-03","added":"2007-04-02","updated":"2016-09-29","author":"YAG KOHHA","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-0038","CVE-2007-1765"],"tags":null,"aliases":"04032007-ie_ani.tar.gz","applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3647,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow","url":"https://www.exploit-db.com/exploits/3647","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/3647.c","file":"exploits/windows/local/3647.c","published":"2007-04-02","added":"2007-04-01","updated":"2016-09-29","author":"Marsu","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2007-0038","CVE-2007-1765"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3636,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)","url":"https://www.exploit-db.com/exploits/3636","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3636.txt","file":"exploits/windows/remote/3636.txt","published":"2007-04-01","added":"2007-03-31","updated":null,"author":"jamikazu","type":"remote","platform":"windows","port":null,"verified":true,"codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"],"tags":null,"aliases":"04012007-exp.zip","applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3635,"kind":"exploit","title":"Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)","url":"https://www.exploit-db.com/exploits/3635","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3635.txt","file":"exploits/windows/remote/3635.txt","published":"2007-04-01","added":"2007-03-31","updated":null,"author":"Trirat Puttaraksa","type":"remote","platform":"windows","port":null,"verified":true,"codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"],"tags":null,"aliases":"04012007-ani.zip","applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3634,"kind":"exploit","title":"Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow","url":"https://www.exploit-db.com/exploits/3634","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3634.txt","file":"exploits/windows/remote/3634.txt","published":"2007-04-01","added":"2007-03-31","updated":null,"author":"jamikazu","type":"remote","platform":"windows","port":null,"verified":true,"codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"],"tags":null,"aliases":"04012007-Animated_Cursor_Exploit.zip","applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":3617,"kind":"exploit","title":"Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow","url":"https://www.exploit-db.com/exploits/3617","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/3617.cpp","file":"exploits/windows/local/3617.cpp","published":"2007-03-31","added":"2007-03-30","updated":null,"author":"devcode","type":"local","platform":"windows","port":null,"verified":true,"codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 54.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://research.eeye.com/html/alerts/zeroday/20070328.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://vil.nai.com/vil/content/v_141860.htm","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.avertlabs.com/research/blog/?p=230","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.avertlabs.com/research/blog/?p=233","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/security/advisory/935423.mspx","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/464287/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/464345/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/23194","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1017827","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/1151","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.eeye.com/html/alerts/zeroday/20070328.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vil.nai.com/vil/content/v_141860.htm","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.avertlabs.com/research/blog/?p=230","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.avertlabs.com/research/blog/?p=233","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/security/advisory/935423.mspx","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464287/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464345/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23194","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1017827","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1151","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1765","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}