Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)

The Microsoft Foundation Class Library is a library that wraps portions of the Windows API in C++ classes,including functionality that enables them to use a default application framework. The vulnerability is due to an error in the FileFind Class that can be exploited via applications that use th...

CVE-2007-4916

CVE-2007-4916 is a heap-based buffer overflow in Microsoft Foundation Class (MFC) Library’s FileFind::FindFile() used by MFC42.dll/MFC42u.dll/MFC71.dll/MFC71u.dll and by Hewlett-Packard HP-related software (hpqutil.dll 2.0.0.138, HP All-in-One, Photo & Imaging Gallery 1.1). The overflow occurs wh...