CVE-2007-1765

HighPublished

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service...

Published: Mar 30, 2007
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: Mar 31, 2007

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

54.6%

High · next 30 days

Percentile: 99.0%
Model date: Oct 15, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)Module
modules/exploits/windows/email/ms07_017_ani_loadimage_chunksize.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: fa174ade81b5Related tool
Declared conditions
- platform: Windows($.exploit_windows/email/ms07_017_ani_loadimage_chunksize.platform)
- verification: check_not_declared($.exploit_windows/email/ms07_017_ani_loadimage_chunksize.check)

Microsoft Windows - Animated Cursor '.ani' Local Stack OverflowExploit
devcode · windows · Mar 31, 2007
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote OverflowExploit
jamikazu · windows · Apr 1, 2007
Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)Exploit
Trirat Puttaraksa · windows · Apr 1, 2007
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)Exploit
jamikazu · windows · Apr 1, 2007
Microsoft Windows - Animated Cursor '.ani' Local Buffer OverflowExploit
Marsu · windows · Apr 2, 2007
Microsoft Windows - Animated Cursor '.ani' Universal GeneratorExploit
YAG KOHHA · windows · Apr 3, 2007
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)Exploit
devcode · windows · Apr 3, 2007
Microsoft Windows Explorer - '.ANI' File Denial of ServiceExploit
Marsu · windows · Apr 8, 2007
Microsoft Windows - Animated Cursor '.ani' Local OverflowExploit
Breno Silva Pinto · windows · Apr 9, 2007
Microsoft Windows - Animated Cursor Stack OverflowExploit
RISE Security · windows · Jun 7, 2007
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)Exploit
Metasploit · windows · Sep 20, 2010

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.