$ cve CVE-2007-0038 JSON

CVE-2007-0038 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 72.9% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	72.88% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2007-03-30
Last modified	2026-06-16

Affected (4)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows vista
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)	2010-09-20
exploit-db	Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)	2010-08-12
exploit-db	Microsoft Windows - Animated Cursor Stack Overflow	2007-06-07
exploit-db	Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)	2007-04-26
exploit-db	Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)	2007-04-17
exploit-db	Microsoft Windows - Animated Cursor '.ani' Local Overflow	2007-04-09
exploit-db	Microsoft Windows Explorer - '.ANI' File Denial of Service	2007-04-08
exploit-db	Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)	2007-04-08
exploit-db	Microsoft Windows - Animated Cursor '.ani' Universal Generator	2007-04-03
exploit-db	Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)	2007-04-03
exploit-db	Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow	2007-04-02
exploit-db	Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow	2007-04-01
exploit-db	Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)	2007-04-01
exploit-db	Microsoft Windows - Animated Cursor '.ani' Remote (eeye patch Bypass)	2007-04-01
exploit-db	Microsoft Windows - Animated Cursor '.ani' Local Stack Overflow	2007-03-31

References

→ the Explorer · watch your stack · NVD