Vulnerability Details : CVE-2007-0444

Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.

Vulnerability category: OverflowExecute code

Published 2007-01-24 22:28:00

Updated 2018-10-16 16:32:37

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-0444

Probability of exploitation activity in the next 30 days: 1.03%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 82 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-0444

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	[email protected]
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-0444

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: [email protected] (Primary)

References for CVE-2007-0444

Products affected by CVE-2007-0444

Citrix » Metaframe » Version: 1.0 XP Edition
cpe:2.3:a:citrix:metaframe:1.0:*:xp:*:*:*:*:*
Matching versions
Citrix » Metaframe Presentation Server » Version: 3.0
cpe:2.3:a:citrix:metaframe_presentation_server:3.0:*:*:*:*:*:*:*
Matching versions
Citrix » Metaframe Presentation Server » Version: 4.0
cpe:2.3:a:citrix:metaframe_presentation_server:4.0:*:*:*:*:*:*:*
Matching versions