CVE-2007-0444 EXPLOIT
7.2
HIGH · CVSS 2.0 · EPSS 14% (pctl 96)
Patch early
A public exploit exists.
Description
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
Scoring
| CVSS | 7.2 (HIGH, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 13.98% — more likely to be exploited than 96% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-01-24 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| citrix | metaframe |
| citrix | metaframe presentation server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC) | 2007-01-26 |
References
- http://osvdb.org/32958
- http://secunia.com/advisories/23869
- http://securitytracker.com/id?1017553
- http://support.citrix.com/article/CTX111686
- http://www.securityfocus.com/archive/1/458002/100/0/threaded
- http://www.securityfocus.com/bid/22217
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
- http://www.vupen.com/english/advisories/2007/0328
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
- http://osvdb.org/32958
- http://secunia.com/advisories/23869
- http://securitytracker.com/id?1017553
- http://support.citrix.com/article/CTX111686
- http://www.securityfocus.com/archive/1/458002/100/0/threaded
- http://www.securityfocus.com/bid/22217
- http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
- http://www.vupen.com/english/advisories/2007/0328
- http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
→ the Explorer · watch your stack · NVD