MS Windows (.ANI) GDI Remote Elevation of Privilege Exploit (MS07-017)

vendor:

Windows

by:

Unknown

7.5

CVSS

HIGH

Remote Elevation of Privilege

269

CWE

Product Name: Windows

Affected Version From: Windows XP, Windows Server 2003

Affected Version To: Windows XP SP2, Windows Server 2003 SP1

Patch Exists: YES

Related CWE: CVE-2007-0038

CPE: o:microsoft:windows

Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-ELSA-2008-0038/

Other Scripts:

Platforms Tested: Windows

2007

MS Windows (.ANI) GDI Remote Elevation of Privilege Exploit (MS07-017)

This exploit targets a vulnerability in the GDI component of MS Windows, specifically related to .ANI files. By exploiting this vulnerability, an attacker can elevate their privileges on the targeted system. The exploit takes advantage of the MS07-017 security update.

Mitigation:

To mitigate this vulnerability, users should apply the MS07-017 security update provided by Microsoft.

Source

MS Windows (.ANI) GDI Remote Elevation of Privilege Exploit (MS07-017)

Mitigation:

Exploit-DB raw data: