PT-2007-1912 · Citrix · Citrix Metaframe+2

Publicado

2007-01-24

·

Atualizado

2018-10-16

·

CVE-2007-0444

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Citrix Presentation Server version 4.0 Citrix MetaFrame Presentation Server version 3.0 Citrix MetaFrame XP version 1.0
Description The issue is related to a stack-based buffer overflow in the print provider library. This can be exploited by local users and remote attackers to execute arbitrary code. The exploitation is possible via long arguments to the EnumPrintersW and OpenPrinter functions.
Recommendations For Citrix Presentation Server version 4.0, update to a version that includes a fix for the buffer overflow issue in the print provider library. For Citrix MetaFrame Presentation Server version 3.0, update to a version that includes a fix for the buffer overflow issue in the print provider library. For Citrix MetaFrame XP version 1.0, update to a version that includes a fix for the buffer overflow issue in the print provider library.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-0444

Produtos afetados

Citrix Metaframe Presentation Server
Citrix Metaframe
Citrix Presentation Server