CVE-2007-0444

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)2007-01-26 · dos · windows · Verified

Impact

Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/32958
• http://secunia.com/advisories/23869
• http://securitytracker.com/id?1017553
• http://support.citrix.com/article/CTX111686
• http://www.securityfocus.com/archive/1/458002/100/0/threaded
• http://www.securityfocus.com/bid/22217
• http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
• http://www.vupen.com/english/advisories/2007/0328
• http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
• http://osvdb.org/32958
• http://secunia.com/advisories/23869
• http://securitytracker.com/id?1017553
• http://support.citrix.com/article/CTX111686
• http://www.securityfocus.com/archive/1/458002/100/0/threaded
• http://www.securityfocus.com/bid/22217
• http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
• http://www.vupen.com/english/advisories/2007/0328
• http://www.zerodayinitiative.com/advisories/ZDI-07-006.html