National Cyber-Alert System

Vulnerability Summary for CVE-2007-0038

Overview

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-093A

Name: TA07-093A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-093A.html

US-CERT Technical Alert: TA07-089A

Name: TA07-089A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-089A.html

US-CERT Vulnerability Note: VU#191609

Name: VU#191609

Hyperlink:http://www.kb.cert.org/vuls/id/191609

US-CERT Technical Alert: TA07-100A

Name: TA07-100A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-100A.html

External Source: XF

Name: windows-ani-code-execution(33301)

Hyperlink:http://xforce.iss.net/xforce/xfdb/33301

External Source: BUGTRAQ

Name: 20070402 More information on ZERT patch for ANI 0day

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464459/100/100/threaded

External Source: BUGTRAQ

Name: 20070331 RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464342/100/0/threaded

External Source: BUGTRAQ

Name: 20070331 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464340/100/0/threaded

External Source: BUGTRAQ

Name: 20070330 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464339/100/0/threaded

External Source: BUGTRAQ

Name: 20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464269/100/0/threaded

External Source: MS

Name: MS07-017

Hyperlink:http://www.microsoft.com/technet/security/Bulletin/ms07-017.mspx

External Source: VUPEN

Name: ADV-2007-1215

Hyperlink:http://www.frsirt.com/english/advisories/2007/1215

External Source: MISC

Name: http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp

Type: Advisory

Hyperlink:http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp

External Source: SECUNIA

Name: 24659

Type: Advisory

Hyperlink:http://secunia.com/advisories/24659

External Source: MILW0RM

Name: 3634

Hyperlink:http://milw0rm.com/exploits/3634

External Source: FULLDISC

Name: 20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0470.html

External Source: HP

Name: SSRT071354

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/466186/100/200/threaded

External Source: BUGTRAQ

Name: 20070402 MS announces out-of-band patch for ANI 0day

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464460/100/100/threaded

External Source: OSVDB

Name: 33629

Hyperlink:http://www.osvdb.org/33629

External Source: SREASON

Name: 2542

Hyperlink:http://securityreason.com/securityalert/2542

US Government Resource: oval:org.mitre.oval:def:1854

Name: oval:org.mitre.oval:def:1854

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1854