{"id":"CVE-2007-0444","aliases":["EUVD-2007-0444","GHSA-hhr4-753f-fpc5"],"status":"published","title":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation...","description":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13834,"percentile":0.96547,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-01-24T22:00:00Z","modified":"2026-06-16T22:35:34Z","exploits":[{"source":"exploitdb","id":"EDB-3204","title":"Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2007-01-26","verified":true,"url":"https://www.exploit-db.com/exploits/3204"}],"products":[{"vendor":"citrix","product":"metaframe"},{"vendor":"citrix","product":"metaframe_presentation_server"}],"references":[{"url":"http://secunia.com/advisories/23869","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/22217","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://support.citrix.com/article/CTX111686","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-006.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://securitytracker.com/id?1017553","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://osvdb.org/32958","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0328","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/458002/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0444"},{"url":"https://github.com/advisories/GHSA-hhr4-753f-fpc5"}],"sources":{"cve":[{"id":"CVE-2007-0444","description":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.","status":"published","published":"2007-01-24T22:00:00Z","modified":"2024-08-07T12:19:30.312Z","updated_at":"2026-11-02T13:34:15.046008Z"}],"euvd":[{"id":"EUVD-2007-0444","description":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.","status":"published","published":"2007-01-24T22:00:00Z","modified":"2024-08-07T12:19:30Z","updated_at":"2026-11-03T01:38:30.634408Z"}],"ghsa":[{"id":"GHSA-hhr4-753f-fpc5","title":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation...","description":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.","status":"published","published":"2022-05-01T17:44:14Z","modified":"2023-01-31T05:02:59Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:22.700087Z"}],"nvd":[{"id":"CVE-2007-0444","description":"Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.","status":"published","published":"2007-01-24T22:28:00Z","modified":"2026-06-16T22:35:34.577Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:11.752648Z"}]}}