Vulnerability Details CVE-2007-1765
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.575
EPSS Ranking 98.0%
CVSS Severity
CVSS v2 Score 9.3
References
- http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/
- http://research.eeye.com/html/alerts/zeroday/20070328.html
- http://vil.nai.com/vil/content/v_141860.htm
- http://www.avertlabs.com/research/blog/?p=230
- http://www.avertlabs.com/research/blog/?p=233
- http://www.microsoft.com/technet/security/advisory/935423.mspx
- http://www.securityfocus.com/archive/1/464287/100/0/threaded
- http://www.securityfocus.com/archive/1/464345/100/0/threaded
- http://www.securityfocus.com/bid/23194
- http://www.securitytracker.com/id?1017827
- http://www.vupen.com/english/advisories/2007/1151
- http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/
- http://research.eeye.com/html/alerts/zeroday/20070328.html
- http://vil.nai.com/vil/content/v_141860.htm
- http://www.avertlabs.com/research/blog/?p=230
- http://www.avertlabs.com/research/blog/?p=233
- http://www.microsoft.com/technet/security/advisory/935423.mspx
- http://www.securityfocus.com/archive/1/464287/100/0/threaded
- http://www.securityfocus.com/archive/1/464345/100/0/threaded
- http://www.securityfocus.com/bid/23194
- http://www.securitytracker.com/id?1017827
- http://www.vupen.com/english/advisories/2007/1151
Products affected by CVE-2007-1765
-
cpe:2.3:a:avaya:ip600_media_servers:-
-
cpe:2.3:a:avaya:ip600_media_servers:r10
-
cpe:2.3:a:microsoft:ie:7.0
-
cpe:2.3:a:microsoft:internet_explorer:-
-
cpe:2.3:a:microsoft:internet_explorer:3.0
-
cpe:2.3:a:microsoft:internet_explorer:3.0.1
-
cpe:2.3:a:microsoft:internet_explorer:3.0.2
-
cpe:2.3:a:microsoft:internet_explorer:3.1
-
cpe:2.3:a:microsoft:internet_explorer:3.2
-
cpe:2.3:a:microsoft:internet_explorer:4.0
-
cpe:2.3:a:microsoft:internet_explorer:4.0.1
-
cpe:2.3:a:microsoft:internet_explorer:4.01
-
cpe:2.3:a:microsoft:internet_explorer:4.1
-
cpe:2.3:a:microsoft:internet_explorer:4.40.308
-
cpe:2.3:a:microsoft:internet_explorer:4.40.520
-
cpe:2.3:a:microsoft:internet_explorer:4.5
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1155
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1158
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1215
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1300
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6
-
cpe:2.3:a:microsoft:internet_explorer:4.71.544
-
cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713
-
cpe:2.3:a:microsoft:internet_explorer:5
-
cpe:2.3:a:microsoft:internet_explorer:5.0
-
cpe:2.3:a:microsoft:internet_explorer:5.0.1
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.01
-
cpe:2.3:a:microsoft:internet_explorer:5.1
-
cpe:2.3:a:microsoft:internet_explorer:5.2.3
-
cpe:2.3:a:microsoft:internet_explorer:5.5
-
cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300
-
cpe:2.3:a:microsoft:internet_explorer:6
-
cpe:2.3:h:avaya:definity_one_media_server:-
-
cpe:2.3:h:avaya:definity_one_media_server:r10
-
cpe:2.3:h:avaya:definity_one_media_server:r9
-
cpe:2.3:h:avaya:s3400:-
-
cpe:2.3:h:avaya:s8100:-
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2003_server:-
-
cpe:2.3:o:microsoft:windows_vista:*
-
cpe:2.3:o:microsoft:windows_vista:-
-
cpe:2.3:o:microsoft:windows_xp:-