CVE-2007-4916
Last modified
CVE-2007-4916 is a vulnerability of currently unknown severity. Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.. EPSS estimates a 19.67% chance of exploitation in the next 30 days.
Description
Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hp | Photo And Imaging Gallery | 1.1 |
| Hp | All-In-On Printer | All versions |
References
- http://www.kb.cert.org/vuls/id/611008US Government Resource
- http://www.kb.cert.org/vuls/id/611008US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4916?
How severe is CVE-2007-4916?
How do I fix CVE-2007-4916?
Are you affected by CVE-2007-4916?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST