CVE-2007-1765

This Metasploit module exploits a stack buffer overflow in the LoadAniIcon() function of USER32.dll via a malicious .ANI file delivered through an SMTP email with a CURSOR style sheet directive. It supports multiple targets, including Windows XP, 2000, and Vista, and includes payload generation and delivery mechanisms.

This is a functional exploit for CVE-2007-0038, targeting a stack overflow in the LoadAniIcon function in user32.dll. It generates a malicious .ANI file and an HTML file to trigger the vulnerability via a crafted cursor, leading to arbitrary code execution.

This exploit targets a vulnerability in Windows Animated Cursor Handling (CVE-2007-0038), allowing remote code execution on vulnerable systems, including fully patched Windows Vista and XP SP2. The PoC invokes calc.exe upon successful exploitation, demonstrating arbitrary code execution.

This exploit targets a buffer overflow vulnerability in Microsoft ANI file handling (CVE-2007-1765) to execute arbitrary code (calc.exe) on Windows XP SP2 with IE 6 SP2. It leverages a crafted .ani file and shellcode from Metasploit's win32_exec module.

This exploit targets a vulnerability in Windows Animated Cursor handling (CVE-2007-1765), allowing remote code execution on fully patched Windows Vista and XP SP2. It bypasses security patches and invokes calc.exe upon successful exploitation.

This is a functional exploit for CVE-2007-0038, targeting a stack overflow in the LoadAniIcon function in user32.dll. It crafts a malicious .ANI file with a malformed header and embedded shellcode to achieve remote code execution.

This is a functional exploit for CVE-2007-1765, targeting a stack overflow vulnerability in Windows Animated Cursor handling. It generates a malicious ANI file embedded in an HTML page to trigger remote code execution via a reverse shell payload.

This exploit generates a malicious .ANI file targeting a vulnerability in Windows cursor handling (CVE-2007-1765), leading to remote code execution via heap corruption. It was tested on Internet Explorer 6.x-7.x and Windows XP SP2/Vista.

This exploit generates a malicious .ANI file targeting CVE-2007-1765, a vulnerability in Windows Animated Cursor handling. It uses a JMP ESP address from ntdll.dll to redirect execution to a port-binding shellcode (port 13579).

This exploit leverages a buffer overflow in the handling of .ANI files in Windows to execute arbitrary code (calc.exe). It crafts a malicious .ANI file with a large buffer and embedded shellcode, targeting a vulnerability in the parsing of animated cursor files.

This exploit generates a malformed .ANI file that triggers a Denial of Service (DoS) in Microsoft Windows Explorer when the file is opened. The crafted file contains a manipulated header that causes Explorer to freeze.

This Metasploit module exploits a stack buffer overflow in the LoadAniIcon() function of USER32.dll via a malicious .ANI file delivered through Outlook Express. It supports multiple targets, including Windows XP, 2000, and Vista, and uses a crafted ANI file embedded in an HTML email to trigger the vulnerability.