CVE-2007-4916

2007-09-1717:17:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.934

Percentile

99.1%

JSON

Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.

Affected configurations

Nvd

Node

hpphoto_and_imaging_galleryMatch1.1

Node

hpall-in-on_printer

VendorProductVersionCPE
hpphoto_and_imaging_gallery1.1cpe:2.3:a:hp:photo_and_imaging_gallery:1.1:*:*:*:*:*:*:*
hpall-in-on_printer*cpe:2.3:h:hp:all-in-on_printer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	photo_and_imaging_gallery	1.1	cpe:2.3:a:hp:photo_and_imaging_gallery:1.1:::::::*
hp	all-in-on_printer	*	cpe:2.3:h:hp:all-in-on_printer::::::::