PT-2007-1912 · Citrix · Citrix Metaframe+2

Published 2007-01-24 · Updated 2018-10-16 · CVE-2007-0444

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Presentation Server version 4.0 Citrix MetaFrame Presentation Server version 3.0 Citrix MetaFrame XP version 1.0

Description The issue is related to a stack-based buffer overflow in the print provider library. This can be exploited by local users and remote attackers to execute arbitrary code. The exploitation is possible via long arguments to the EnumPrintersW and OpenPrinter functions.

Recommendations For Citrix Presentation Server version 4.0, update to a version that includes a fix for the buffer overflow issue in the print provider library. For Citrix MetaFrame Presentation Server version 3.0, update to a version that includes a fix for the buffer overflow issue in the print provider library. For Citrix MetaFrame XP version 1.0, update to a version that includes a fix for the buffer overflow issue in the print provider library.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0444

Affected Products

Citrix Metaframe Presentation Server

Citrix Metaframe

Citrix Presentation Server

References · 14

• 🔥 https://exploit-db.com/exploits/3204 · Exploit
• http://secunia.com/advisories/23869 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0444 · Security Note
• http://support.citrix.com/article/CTX111686 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0328 · Vendor Advisory
• http://osvdb.org/32958 · Note
• http://securityfocus.com/bid/22217 · Note
• http://securityfocus.com/data/vulnerabilities/exploits/testlpc.c · Note
• http://frsirt.com/english/advisories/2007/0328 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-006.html · Note
• http://securityfocus.com/archive/1/archive/1/458002/100/0/threaded · Note
• http://securityfocus.com/archive/1/458002/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0444 · Note
• http://securitytracker.com/id?1017553 · Note