Vulnerability in N/a
CVE-2007-0038
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (…
EPSS: 0.880 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- TA07-093A (x_refsource_CERT, third-party-advisory)
- ADV-2007-1215 (vdb-entry, x_refsource_VUPEN)
- 2542 (x_refsource_SREASON, third-party-advisory)
- 20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (mailing-list, x_refsource_FULLDISC)
- oval:org.mitre.oval:def:1854 (signature, x_refsource_OVAL, vdb-entry)
- 20070331 RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) (mailing-list, x_refsource_BUGTRAQ)
- VU#191609 (x_refsource_CERT-VN, third-party-advisory)
- HPSBST02206 (x_refsource_HP, vendor-advisory)
- 24659 (x_refsource_SECUNIA, third-party-advisory)
- TA07-089A (x_refsource_CERT, third-party-advisory)
Frequently asked questions
- What is CVE-2007-0038?
- CVE-2007-0038 is a vulnerability in N/a. Published 2007-03-30.
- Is CVE-2007-0038 known to be exploited?
- 10 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.