CVE-2007-4916 Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFile...
HighCVSS 10.0
EPSS 19.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc photo and imaging gallery | = 1.1 | No fix listed |
| HP Inc all-in-on printer | All versions | No fix listed |
References
- goodfellas.shellcode.com.ar
- goodfellas.shellcode.com.ar
- 26800 third-party-advisory
- 3143 third-party-advisory
- VU#611008 third-party-advisory us-government-resource
- 20070914 [GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remoteheap overflow mailing-list
- 20070914 [GOODFELLAS-VULN] FileFind class from MFC Library cause heapoverflow mailing-list
- 25673 vdb-entry
- 25697 vdb-entry
- 1018698 vdb-entry
- ADV-2007-3182 vdb-entry
- visual-mfc-findfile-bo(36608) vdb-entry
- hp-hpqutillistfiles-bo(36609) vdb-entry