Is CVE-2007-1765 being actively exploited?

CVE-2007-1765 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-1765?

CVE-2007-1765 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2007-1765

HIGH · CVSS 9.3EPSS 54.6%EU EUVD

Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS score: 54.6% (99th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-1759)
Published: March 30, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-1759 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

avaya / definity one media server
avaya / ip600 media servers
avaya / s3400
avaya / s8100
microsoft / ie
microsoft / internet explorer
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2000
microsoft / windows 2003 server
microsoft / windows 2003 server
microsoft / windows 2003 server
microsoft / windows 2003 server
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows vista
microsoft / windows xp
microsoft / windows xp
microsoft / windows xp
microsoft / windows xp

Certified products that may be affected

11 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Windows Vista Enhanced Cryptographic Provider (RSAENH) - Microsoft Corporation - FIPS 140 1002 - historical
Windows Vista Enhanced DSS and Diffie-Hellman Cryptographic Provider (DSSENH) - Microsoft Corporation - FIPS 140 1003 - historical
Windows XP Enhanced Cryptographic Provider (RSAENH) - Microsoft Corporation - FIPS 140 989 - historical
Windows XP Enhanced DSS and Diffie-Hellman Cryptographic Provider (DSSENH) - Microsoft Corporation - FIPS 140 990 - historical
Windows Vista Boot Manager (bootmgr) - Microsoft Corporation - FIPS 140 978 - historical

See all 11 in the Security Certifications Explorer.

References

http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/(Broken Link)
http://research.eeye.com/html/alerts/zeroday/20070328.html(Third Party Advisory)
http://vil.nai.com/vil/content/v_141860.htm(Broken Link)
http://www.avertlabs.com/research/blog/?p=230(Third Party Advisory)
http://www.avertlabs.com/research/blog/?p=233(Third Party Advisory)
http://www.microsoft.com/technet/security/advisory/935423.mspx(Vendor Advisory)
http://www.securityfocus.com/archive/1/464287/100/0/threaded
http://www.securityfocus.com/archive/1/464345/100/0/threaded
http://www.securityfocus.com/bid/23194(Third Party Advisory, VDB Entry)
http://www.securitytracker.com/id?1017827(Third Party Advisory, VDB Entry)
http://www.vupen.com/english/advisories/2007/1151(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain