CVEvulnerability
CVE-2007-0444
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
Affected configurations
• citrix metaframe 1.0
• citrix metaframe presentation server 3.0
• citrix metaframe presentation server 4.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/32958 osvdb.org
- http://secunia.com/advisories/23869 Vendor Advisory
- http://securitytracker.com/id?1017553 securitytracker.com
- http://support.citrix.com/article/CTX111686 Vendor Advisory
- http://www.securityfocus.com/archive/1/458002/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22217 www.securityfocus.com
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0328 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html www.zerodayinitiative.com
- http://osvdb.org/32958 osvdb.org
- http://secunia.com/advisories/23869 Vendor Advisory
- http://securitytracker.com/id?1017553 securitytracker.com
- http://support.citrix.com/article/CTX111686 Vendor Advisory
- http://www.securityfocus.com/archive/1/458002/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22217 www.securityfocus.com
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0328 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html www.zerodayinitiative.com