CVE-2007-0038

This is a Metasploit module exploiting CVE-2007-0038, a stack buffer overflow in the LoadAniIcon() function in USER32.dll. It targets multiple Windows versions and browsers (IE6, IE7, Firefox) via a malicious .ANI file delivered through HTTP or WebDAV.

This exploit targets CVE-2007-0038, a stack overflow vulnerability in Windows Animated Cursor handling. It generates a malicious ANI file embedded in an HTML page to trigger remote code execution via a reverse shell payload.

This exploit generates a malicious .ANI file targeting CVE-2007-1765, a vulnerability in Windows Animated Cursor handling. It crafts a buffer with a malicious header and shellcode to trigger remote code execution via a JMP ESP instruction in ntdll.dll.

This exploit generates a malformed .ANI file that triggers a denial-of-service (DoS) condition in Microsoft Windows Explorer when the file is accessed. The PoC crafts a buffer with a specific header and fills the rest with 'A' characters to cause the crash.

This is a universal exploit generator for CVE-2007-1765, targeting a vulnerability in the handling of .ANI (RIFF Cursors) files in Microsoft Internet Explorer 6.x-7.x on Windows XP SP2 and Windows Vista. The exploit leverages heap manipulation techniques to achieve remote code execution.

This exploit leverages a buffer overflow in the handling of .ANI files in Microsoft Windows to execute arbitrary code (calc.exe). It crafts a malicious .ANI file with embedded shellcode and a carefully placed CALL ESI instruction to redirect execution.

This is a functional exploit for CVE-2007-0038, targeting a buffer overflow vulnerability in the Windows Animated Cursor (ANI) parsing. The exploit crafts a malicious ANI file with shellcode to achieve remote code execution via a reverse TCP shell.

This exploit targets a vulnerability in Windows Animated Cursor Handling (CVE-2007-0038), allowing remote code execution by leveraging a malformed cursor file. It successfully invokes calc.exe on vulnerable systems, including fully patched Windows Vista and XP SP2.

This exploit targets a buffer overflow vulnerability in Microsoft's handling of ANI files (CVE-2007-0038). It executes arbitrary code (calc.exe) via a crafted ANI file, leveraging a shellcode from Metasploit's win32_exec. The exploit is functional on Windows XP SP2 with IE 6 SP2.

This exploit targets a vulnerability in Windows Animated Cursor Handling (CVE-2007-0038), allowing remote code execution on fully patched Windows Vista and XP SP2. It bypasses security patches and invokes calc.exe upon successful exploitation.

This is a functional Metasploit exploit module for CVE-2007-0038, targeting a stack buffer overflow in the LoadAniIcon() function of USER32.dll via a malicious .ANI file delivered through Outlook Express. It includes multiple targets for different Windows versions and languages, and generates a crafted email with an embedded ANI file to trigger the vulnerability.

This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-0038) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.

This exploit leverages a GDI local privilege escalation vulnerability (CVE-2007-0038) by manipulating a palette object's kernel pointer to execute arbitrary code in kernel mode. It targets unpatched Windows 2000/XP systems by exploiting a flaw in GDI object handling.

This is a functional local privilege escalation exploit for CVE-2007-0038, targeting a vulnerability in the Windows GDI component (MS07-017). It manipulates the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary kernel code execution via a crafted payload.

This is a functional exploit for CVE-2007-0038, which targets a stack overflow vulnerability in the LoadAniIcon function in user32.dll. The exploit crafts a malicious ANI file with a malformed header and embedded shellcode to achieve remote code execution.

This is a functional exploit for CVE-2007-0038, targeting a stack overflow in the LoadAniIcon function in user32.dll. It crafts a malicious .ANI file and an HTML file to trigger the vulnerability, leading to arbitrary code execution (e.g., launching calc.exe or logoff.exe).

This Metasploit module exploits a stack buffer overflow in the LoadAniIcon() function in USER32.dll via a malicious .ANI file, targeting multiple Windows versions and browsers (IE6, IE7, Firefox). It uses HTTP server functionality to deliver the exploit payload.