CVE-2007-0444

Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.

• CWE-119

• http://osvdb.org/32958
• http://secunia.com/advisories/23869Vendor Advisory
• http://securitytracker.com/id?1017553
• http://support.citrix.com/article/CTX111686Vendor Advisory
• http://www.securityfocus.com/archive/1/458002/100/0/threaded
• http://www.securityfocus.com/bid/22217
• http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
• http://www.vupen.com/english/advisories/2007/0328Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-006.html
• http://osvdb.org/32958
• http://secunia.com/advisories/23869Vendor Advisory
• http://securitytracker.com/id?1017553
• http://support.citrix.com/article/CTX111686Vendor Advisory
• http://www.securityfocus.com/archive/1/458002/100/0/threaded
• http://www.securityfocus.com/bid/22217
• http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
• http://www.vupen.com/english/advisories/2007/0328Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-006.html

Published

Jan 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0435T-Com Speedport 500V routers with firmware 1.31 allow remote…
• CVE-2007-0436Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Ins…
• CVE-2007-0437Multiple cross-site scripting (XSS) vulnerabilities in the s…
• CVE-2007-0441Unspecified vulnerability in HP OpenView Network Node Manage…
• CVE-2007-0442Unspecified vulnerability in IBM OS/400 R530 and R535 has un…
• CVE-2007-0443Multiple buffer overflows in the CDDBControl ActiveX control…
• CVE-2007-0445Heap-based buffer overflow in the arj.ppl module in the OnDe…
• CVE-2007-0446Stack-based buffer overflow in magentproc.exe for Hewlett-Pa…
• CVE-2007-0447Heap-based buffer overflow in the Decomposer component in mu…
• CVE-2007-0448The fopen function in PHP 5.2.0 does not properly handle inv…
• CVE-2007-0449Multiple buffer overflows in LGSERVER.EXE in CA BrightStor A…
• CVE-2007-0450Directory traversal vulnerability in Apache HTTP Server and …