CVE-2007-0038: microsoft windows_2003_server

CVSS: 9.3v2.0HighModified

Published 30-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-0038 is a high (CVSS 9.3) vulnerability in microsoft windows_2003_server. EPSS estimates a 72.98% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 17 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

72.98%

0%100%

Critical · +0.10 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits17exploit-database, metasploit

Timeline

30-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

72.98%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.10 pp

From 72.88% on 19-09-2026

19-09-202619-10-2026

EPSS score

72.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

17 found

exploit-databasedoswindowsVerified
Microsoft Windows Explorer - '.ANI' File Denial of Service
Maturity: poc
exploit-databaselocalwindowsVerified
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
Maturity: weaponized
exploit-databaselocalwindowsVerified
Microsoft Windows - Animated Cursor '.ani' Local Overflow
Maturity: weaponized

Show all 17 exploits

exploit-databaselocalwindowsVerified
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Maturity: weaponized
exploit-databaselocalwindowsVerified
Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow
Maturity: weaponized
exploit-databaselocalwindowsVerified
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Maturity: weaponized
exploit-databaselocalwindowsVerified
Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - Animated Cursor '.ani' Universal Generator
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows - Animated Cursor Stack Overflow
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow
Maturity: weaponized
MetasploitremoteVerified
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)
exploit/windows/browser/ms07_017_ani_loadimage_chunksize
Maturity: weaponized
MetasploitremoteVerified
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)
exploit/windows/email/ms07_017_ani_loadimage_chunksize
Maturity: weaponized