US-CERT Technical Cyber Security Alert TA07-089A -- Microsoft Windows ANI header stack buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-089A Microsoft Windows ANI header stack buffer overflow Original release date: March 30, 2007 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows 2000, XP, Server 2003, an...

MS Windows Animated Cursor (.ANI) Stack Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== MS Windows Animated Cursor .ANI Stack Overflow Exploit ======================================================== / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon...

Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow

/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected system. This issue is due to a stack...

Stack overflow

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

CVE-2007-1765

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue...

Memory corruption

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue...

[Full-disclosure] ANI Zeroday, Third Party Patch

A new vulnerability was recently discovered, in the wild, that affects the .ANI file format. This flaw affects all versions of Microsoft Windows and can be delivered through multiple attack vectors, specifically any user who visits a malicious website. This flaw remains as of yet unpatched by...

CVE-2007-1765

CVE-2007-1765 refers to a remote code execution/DoS vulnerability in Microsoft Windows (Windows 2000 SP4 through Vista) via a malformed ANI file that corrupts memory while processing cursors/animated cursors/icons in LoadAniIcon() of USER32.dll. Connected sources identify this as MS07-017 (RIFF/A...

CVE-2007-1765

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue...

Microsoft Windows Cursor And Icon ANI Format Handling Remote Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a stack buffer-overflow vulnerability because of insufficient format validation that occurs when handling malformed ANI cursor or icon files. An attacker can exploit this issue to execute arbitrary code with the privileges of an unsuspecting user. A...

CVE-2006-4374

IrfanView 3.98 with plugins allows user-assisted attackers to cause a denial of service application crash via a crafted ANI image file, possibly due to a buffer overflow...

CVE-2006-4374

CVE-2006-4374 : The provided documents indicate a vulnerability in IrfanView 3.98 (with plugins) where a user-assisted attacker can cause an application crash (denial of service) by processing a crafted ANI image file, with the root cause suggested as a possible buffer overflow. The information d...

IrfanView 3.98 - '.ANI' Image File Denial of Service

source: https://www.securityfocus.com/bid/19452/info IrfanView is prone to a denial-of-service vulnerability. A remote attacker may crash the application, resulting in denial-of-service conditions to legitimate users. This issue may potentially be exploited to execute arbitrary machine code, but...

ms05002 exploit the program and its test results-vulnerability warning-the black bar safety net

Article author: invincible most lonelyE. S. T Information source: evil octal China Vulnerability details can go to the following address to download: Get the code,read the code. The original code is the use of the local bonding of the shellcode. Practical too poor,and because of this vulnerabilit...

CVE-2005-0416

CVE-2005-0416 describes a stack-based buffer overflow in the Windows Animated Cursor (ANI) handling. The vulnerability affects Windows NT, Windows 2000 (SP4), Windows XP (SP1), and Windows 2003, where a crafted AnimationHeaderBlock length field can lead to remote code execution or memory corrupti...

Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)

ANI is a Windows Animated cursor file format. Specially crafted ANI files may be used to create a DoS condition and in some cases, arbitrary code execution...

Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)

...

Microsoft Internet Explorer - .ANI Downloader (MS05-002)

Microsoft Internet Explorer - .ANI Downloader MS05-002 / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002...

MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)

Exploit for unknown platform in category remote exploits ====================================================================== MS Internet Explorer .ANI files handling Downloader Exploit MS05-002 ====================================================================== / Modified by Vertygo aka Iva...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

Exploit for unknown platform in category remote exploits ===================================================================== MS Internet Explorer .ANI files handling Universal Exploit MS05-002 ===================================================================== / Added string.h /str0ke / /...