CVE-2007-0038 PoC — Microsoft Windows动画光标畸形ANI头结构远程栈溢出漏洞(MS07-017)

Source

https://github.com/Axua/CVE-2007-0038

Associated Vulnerability

Title:Microsoft Windows动画光标畸形ANI头结构远程栈溢出漏洞(MS07-017) (CVE-2007-0038)
Description:Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows在处理畸形的动画图标文件(.ani)时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Microsoft Windows的LoadAniIcon()函数(user32.dll)在渲染畸形的光标、动画光标文件(.ani)或图标时没有正确地验证ANI头中所指定的大小，导致栈溢出漏洞。如果用户受骗使用IE访问了恶意站点或打开了恶意的邮件消息的话，就会触发这个溢出，导致执行任

Description

IE7 buffer overflow through an ANI file

File Snapshot


 [4.0K]  /data/pocs/3d425d6d5f4cc50d71b3c1efd0d798d4953709fd
├── [2.5K]  exploit.py
└── [  58]  index.html

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!