National Cyber-Alert System

Vulnerability Summary for CVE-2007-4916

Overview

Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#611008

Name: VU#611008

Hyperlink:http://www.kb.cert.org/vuls/id/611008

External Source: BUGTRAQ

Name: 20070914 [GOODFELLAS-VULN] FileFind class from MFC Library cause heapoverflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/479443/100/0/threaded

External Source: BUGTRAQ

Name: 20070914 [GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remoteheap overflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/479442/100/0/threaded

External Source: MISC

Name: http://goodfellas.shellcode.com.ar/own/VULWKU200706142

Hyperlink:http://goodfellas.shellcode.com.ar/own/VULWKU200706142

External Source: MISC

Name: http://goodfellas.shellcode.com.ar/own/VULWAR200706041

Hyperlink:http://goodfellas.shellcode.com.ar/own/VULWAR200706041

External Source: XF

Name: hp-hpqutillistfiles-bo(36609)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36609

External Source: XF

Name: visual-mfc-findfile-bo(36608)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36608

External Source: SECTRACK

Name: 1018698

Hyperlink:http://www.securitytracker.com/id?1018698

External Source: BID

Name: 25697

Hyperlink:http://www.securityfocus.com/bid/25697

External Source: BID

Name: 25673

Hyperlink:http://www.securityfocus.com/bid/25673

External Source: VUPEN

Name: ADV-2007-3182

Hyperlink:http://www.frsirt.com/english/advisories/2007/3182

External Source: SREASON

Name: 3143

Hyperlink:http://securityreason.com/securityalert/3143

External Source: SECUNIA

Name: 26800

Hyperlink:http://secunia.com/advisories/26800