PT-2007-3121 · Avaya+1 · Definity One Media Server+9

Published 2007-03-30 · Updated 2021-07-23 · CVE-2007-1765

NVD

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.

Exploit

Fix

Related Identifiers

CVE-2007-1765

Affected Products

Definity One Media Server

Ie

Internet Explorer

Ip600 Media Servers

S3400

S8100

Windows 2000

Windows Server 2003

Windows Vista

Windows Xp

References · 24

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/email/ms07_017_ani_loadimage_chunksize.rb · Exploit
• 🔥 https://exploit-db.com/exploits/3634 · Exploit
• 🔥 https://exploit-db.com/exploits/3635 · Exploit
• 🔥 https://exploit-db.com/exploits/3684 · Exploit
• 🔥 https://exploit-db.com/exploits/3636 · Exploit
• 🔥 https://exploit-db.com/exploits/4045 · Exploit
• 🔥 https://exploit-db.com/exploits/16698 · Exploit
• 🔥 https://exploit-db.com/exploits/3651 · Exploit
• 🔥 https://exploit-db.com/exploits/3617 · Exploit
• 🔥 https://exploit-db.com/exploits/3695 · Exploit
• 🔥 https://exploit-db.com/exploits/3647 · Exploit
• 🔥 https://exploit-db.com/exploits/3652 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1765 · Security Note
• http://microsoft.com/technet/security/advisory/935423.mspx · Vendor Advisory
• http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you · Note