CVE-2007-0444

Description

Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.

References

http://www.zerodayinitiative.com/advisories/ZDI-07-006.html

http://www.vupen.com/english/advisories/2007/0328

http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c

http://www.securityfocus.com/bid/22217

http://www.securityfocus.com/archive/1/458002/100/0/threaded

http://support.citrix.com/article/CTX111686

http://securitytracker.com/id?1017553

http://secunia.com/advisories/23869

http://osvdb.org/32958

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS