{"schemaVersion":3,"id":"CVE-2007-1765","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7.  NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.","dates":{"published":"2007-03-30T00:00:00.000Z","modified":"2024-08-07T13:06:26.389Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.54604,"percentile":0.99011,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.54604},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.54604,"percentile":0.99011}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.54604,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.54604,"percentile":0.99011}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"3684","name":"Microsoft Windows Explorer - '.ANI' File Denial of Service","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3684","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"windows","file":"exploits/windows/dos/3684.c","codes":["CVE-2007-0038","CVE-2007-1765"]},"metasploit":null},{"id":"3647","name":"Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3647","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/3647.c","codes":["CVE-2007-0038","CVE-2007-1765"]},"metasploit":null},{"id":"3695","name":"Microsoft Windows - Animated Cursor '.ani' Local Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3695","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/3695.c","codes":["CVE-2007-0038","CVE-2007-1765"]},"metasploit":null},{"id":"3652","name":"Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3652","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/3652.c","codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"]},"metasploit":null},{"id":"3617","name":"Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3617","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/3617.cpp","codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"]},"metasploit":null},{"id":"16698","name":"Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16698","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/16698.rb","codes":["CVE-2007-1765","CVE-2007-0038","OSVDB-33629","MS07-017"]},"metasploit":null},{"id":"3636","name":"Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3636","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/3636.txt","codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"]},"metasploit":null},{"id":"3651","name":"Microsoft Windows - Animated Cursor '.ani' Universal Generator","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3651","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/3651.txt","codes":["CVE-2007-0038","CVE-2007-1765"]},"metasploit":null},{"id":"4045","name":"Microsoft Windows - Animated Cursor Stack Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/4045","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/4045.py","codes":["CVE-2007-0038","CVE-2007-1765"]},"metasploit":null},{"id":"3635","name":"Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3635","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/3635.txt","codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"]},"metasploit":null},{"id":"3634","name":"Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/3634","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/3634.txt","codes":["OSVDB-33629","CVE-2007-1765","CVE-2007-0038"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_EMAIL_MS07_017_ANI_LOADIMAGE_CHUNKSIZE","name":"Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/email/ms07_017_ani_loadimage_chunksize.rb","maturity":"weaponized","reliabilityScore":0.8333333333333334,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/email/ms07_017_ani_loadimage_chunksize","rank":"500","rankName":"great","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":12,"weaknesses":[],"affected":[{"vendor":"microsoft","product":"ie","name":"ie","label":"ie","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":{"isEol":true,"eolDate":"2023-10-10T00:00:00.000Z","matchMethod":"alias_exact","cycle":{"name":"7","label":"7","eolFrom":"2023-10-10T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"internet-explorer","label":"Internet Explorer","category":"app"}},"hubHref":"/vendor/microsoft/ie"},{"vendor":"microsoft","product":"internet_explorer","name":"Internet Explorer","label":"internet_explorer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"internet-explorer","label":"Internet Explorer","category":"app"}},"hubHref":"/vendor/microsoft/internet_explorer"},{"vendor":"microsoft","product":"windows_2000","name":"windows 2000","label":"windows_2000","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_2000"},{"vendor":"microsoft","product":"windows_2003_server","name":"windows 2003 server","label":"windows_2003_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_2003_server"}],"affectedCount":4,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.securityfocus.com/archive/1/464287/100/0/threaded","label":"www.securityfocus.com/archive/1/464287/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://research.eeye.com/html/alerts/zeroday/20070328.html","label":"research.eeye.com/html/alerts/zeroday/20070328.html","hostname":"research.eeye.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/464345/100/0/threaded","label":"www.securityfocus.com/archive/1/464345/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.vupen.com/english/advisories/2007/1151","label":"www.vupen.com/english/advisories/2007/1151","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://vil.nai.com/vil/content/v_141860.htm","label":"vil.nai.com/vil/content/v_141860.htm","hostname":"vil.nai.com","tags":["X Refsource MISC","Broken Link"]},{"url":"http://www.avertlabs.com/research/blog/?p=230","label":"www.avertlabs.com/research/blog/?p=230","hostname":"www.avertlabs.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/23194","label":"www.securityfocus.com/bid/23194","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/935423.mspx","label":"www.microsoft.com/technet/security/advisory/935423.mspx","hostname":"www.microsoft.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1017827","label":"www.securitytracker.com/id?1017827","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.avertlabs.com/research/blog/?p=233","label":"www.avertlabs.com/research/blog/?p=233","hostname":"www.avertlabs.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/","label":"asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/","hostname":"asert.arbornetworks.com","tags":["X Refsource MISC","Broken Link"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-03-30T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T13:06:26.389Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T06:16:51.130Z","stale":false,"partial":false}}