NVD

Id
52271  
Name
CVE-2007-0038  
Description
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-30  
Modified Date
2012-11-05  
Seq
2007-0038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263921 52271 CVE-2007-0038 20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)  View
263922 52271 CVE-2007-0038 3634  View
263923 52271 CVE-2007-0038 oval:org.mitre.oval:def:1854  View
263924 52271 CVE-2007-0038 2542  View
263925 52271 CVE-2007-0038 http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp  View
263926 52271 CVE-2007-0038 VU#191609  View
263927 52271 CVE-2007-0038 MS07-017  View
263928 52271 CVE-2007-0038 20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)  View
263929 52271 CVE-2007-0038 20070330 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)  View
263930 52271 CVE-2007-0038 20070331 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)  View
263931 52271 CVE-2007-0038 20070331 RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038)  View
263932 52271 CVE-2007-0038 20070402 More information on ZERT patch for ANI 0day  View
263933 52271 CVE-2007-0038 20070402 MS announces out-of-band patch for ANI 0day  View
263934 52271 CVE-2007-0038 SSRT071354  View
263935 52271 CVE-2007-0038 TA07-089A  View
263936 52271 CVE-2007-0038 TA07-093A  View
263937 52271 CVE-2007-0038 TA07-100A  View
263938 52271 CVE-2007-0038 ADV-2007-1215  View
263939 52271 CVE-2007-0038 win-ani-code-execution(33301)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51580 JVNDB-2007-000242 Microsoft Windows のアニメーションカーソルにおけるバッファオーバーフローの脆弱性 Microsoft Windows におけるアニメーション カーソル (ANI) の処理にはスタックバッファオーバーフローの脆弱性が存在します。 CVE-2007-0038 23393 CVE-2007-0038 52271 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000242.html 2007-03-29 2007-05-02 View