CVE-2007-1765

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/Broken Link
http://research.eeye.com/html/alerts/zeroday/20070328.htmlThird Party Advisory
http://vil.nai.com/vil/content/v_141860.htmBroken Link
http://www.avertlabs.com/research/blog/?p=230Third Party Advisory
http://www.avertlabs.com/research/blog/?p=233Third Party Advisory
http://www.microsoft.com/technet/security/advisory/935423.mspxVendor Advisory
http://www.securityfocus.com/archive/1/464287/100/0/threaded
http://www.securityfocus.com/archive/1/464345/100/0/threaded
http://www.securityfocus.com/bid/23194Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017827Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1151Third Party Advisory
http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/Broken Link
http://research.eeye.com/html/alerts/zeroday/20070328.htmlThird Party Advisory
http://vil.nai.com/vil/content/v_141860.htmBroken Link
http://www.avertlabs.com/research/blog/?p=230Third Party Advisory
http://www.avertlabs.com/research/blog/?p=233Third Party Advisory
http://www.microsoft.com/technet/security/advisory/935423.mspxVendor Advisory
http://www.securityfocus.com/archive/1/464287/100/0/threaded
http://www.securityfocus.com/archive/1/464345/100/0/threaded
http://www.securityfocus.com/bid/23194Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017827Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1151Third Party Advisory

Timeline

Published: Mar 30, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-176610.0PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to exec CVE-2007-17677.8Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial o CVE-2007-17684.3Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote att CVE-2007-177010.0Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when usi CVE-2007-17719.3PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System (WCS) 2.7.1 allows CVE-2007-17727.1The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a RETR command with a CVE-2007-17732.6Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d CVE-2007-17744.3Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to inject arbitrary web script or HTML via the d pa CVE-2007-17756.8Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote attackers to upload and execute arbitrary PH CVE-2007-17766.8SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for Joomla! allows remot CVE-2007-17777.5Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive th CVE-2007-177810.0PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remote attackers to execu