Microsoft Windows Cursor And Icon ANI Format Handling Remote Buffer Overflow Vulnerability

🗓️ 29 Mar 2007 00:00:00Reported by Symantec Security ResponseType

Microsoft Windows ANI Format Handling Remote Buffer Overflow Vulnerability in Windows Vista, Windows XP SP2, and Windows Server 2003 SP1 when running Internet Explorer 6 and 7, leading to arbitrary code execution and compromise of user accounts and computers

Reporter	Title	Published	Views	Family All 31
canvas	Immunity Canvas: ANI_CURSOR	30 Mar 200720:19	–	canvas
Circl	CVE-2007-0038	12 Aug 201000:00	–	circl
Check Point Advisories	Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)	1 Feb 200500:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows ANI File Parsing Buffer Overflow (MS05-002; CVE-2004-1049; CVE-2007-0038)	1 Feb 200500:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Microsoft Windows Animated Cursor Remote Code Execution Vulnerability (MS07-017)	4 Apr 200700:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows RIFF Buffer Overflow - Ver2 (CVE-2007-0038)	3 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2007-0038	30 Mar 200720:00	–	cve
Cvelist	CVE-2007-0038	30 Mar 200720:00	–	cvelist
Exploit DB	Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)	12 Aug 201000:00	–	exploitdb
Metasploit	Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)	15 Apr 201016:08	–	metasploit

Source	Link
blog	www.blog.metasploit.com/2007/04/exploiting-ani-vulnerability-on-vista.html
blogs	www.blogs.technet.com/msrc/archive/2007/04/18/new-updates-for-microsoft-knowledge-base-article-925902.aspx
zert	www.zert.isotf.org/advisories/zert-2007-01.htm
blogs	www.blogs.technet.com/msrc/archive/2007/04/01/latest-on-security-update-for-microsoft-security-advisory-935423.aspx
avertlabs	www.avertlabs.com/research/blog/
blogs	www.blogs.technet.com/msrc/archive/2007/03/29/microsoft-security-advisory-935423-posted.aspx
determina	www.determina.com/security.research/vulnerabilities/ani-header.html
symantec	www.symantec.com/enterprise/security_response/weblog/2007/03/cursors_and_icons_and_exploits.html
www116	www.www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/15/022139-01.pdf

29 Mar 2007 00:00Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.88042