Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-0038 PoC — Microsoft Windows动画光标畸形ANI头结构远程栈溢出漏洞(MS07-017)

Source
https://github.com/Axua/CVE-2007-0038
Associated Vulnerability
Title:Microsoft Windows动画光标畸形ANI头结构远程栈溢出漏洞(MS07-017) (CVE-2007-0038)
Description:Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.
Description
IE7 buffer overflow through an ANI file
File Snapshot

 [4.0K]  /data/pocs/3d425d6d5f4cc50d71b3c1efd0d798d4953709fd
├── [2.5K]  exploit.py
└── [  58]  index.html

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →