CVE-2007-0444
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 13.98% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- citrix/metaframe · citrix/metaframe presentation server
- Source
- cve@mitre.org
References
- http://osvdb.org/32958
- http://secunia.com/advisories/23869Vendor Advisory
- http://securitytracker.com/id?1017553
- http://support.citrix.com/article/CTX111686Vendor Advisory
- http://www.securityfocus.com/archive/1/458002/100/0/threaded
- http://www.securityfocus.com/bid/22217
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
- http://www.vupen.com/english/advisories/2007/0328Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
- http://osvdb.org/32958
- http://secunia.com/advisories/23869Vendor Advisory
- http://securitytracker.com/id?1017553
- http://support.citrix.com/article/CTX111686Vendor Advisory
- http://www.securityfocus.com/archive/1/458002/100/0/threaded
- http://www.securityfocus.com/bid/22217
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
- http://www.vupen.com/english/advisories/2007/0328Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.