Vulnerability identifier: #VU1379

Vulnerability risk: Critical

CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C]

CVE-ID: CVE-2007-0038

CWE-ID: CWE-119

Exploitation vector: Network

Exploits in database: 18

• March 31, 2020
  • cve2007-0038x64 (An attack exploiting CVE 2007-0038 on Windows XP Pro x64 Edition SP1) [Github]
• March 18, 2020
  • Microsoft Windows - Animated Cursor '.ani' Local Overflow [Exploit-DB]
  • Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) [Metasploit]
  • Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) [Metasploit]
  • Microsoft Windows - Explorer Unspecified .ANI File Denial of Service [Exploit-DB]
  • Microsoft Windows - Animated Cursor '.ani' Stack Overflow [Exploit-DB]
  • Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow [Exploit-DB]
  • Microsoft Windows - Animated Cursor '.ani' Overflow (Hardware DEP) [Exploit-DB]
  • Microsoft Windows - GDI Privilege Escalation (MS07-017) (1) [Exploit-DB]
  • Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit) [Exploit-DB]
  • Microsoft Windows - GDI Privilege Escalation (MS07-017) (2) [Exploit-DB]
  • Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow [Exploit-DB]
  • Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2) [Exploit-DB]
  • Microsoft Windows - Animated Cursor '.ani' Remote Exploit (eeye patch Bypass) [Exploit-DB]
  • Microsoft Windows - Animated Cursor '.ani' Universal Exploit Generator [Exploit-DB]
  • Microsoft Windows - '.ani' GDI Remote Elevation of Privilege Exploit (MS07-017) [Exploit-DB]
  • Microsoft Windows - Animated Cursor Stack Overflow [Exploit-DB]
  • Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit) [Exploit-DB]

Impact: Code execution

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft