VAR-200709-0151
Vulnerability from variot - Updated: 2025-04-10 23:01Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument. Microsoft Foundation Class (MFC) Included in library FindFile() The function contains a heap buffer overflow vulnerability. As a result, arbitrary code may be executed or service operation may be interrupted (DoS) There is a possibility of being attacked. Microsoft Foundation Class (MFC) The library Visual C++ Class library for MFC Is Microsoft Visual Studio And Microsoft Windows And may be used in many other applications. this MFC Included in the library FindFile() The function provides the ability to search for files from the entire file system. MFC42 Library and MFC70 Library FindFile() The function does not handle arguments properly, so heap buffer overflow vulnerability is included, resulting in arbitrary code execution and service disruption (DoS) There is a possibility of being attacked. From Microsoft MFC 71 The library is not affected, MFC 70 It was confirmed that the library was affected. JVN So, with regard to the affected system, MFC 71 I mentioned it as a library. MFC 70 I corrected it to the library.Expected impact is affected MFC It depends on how the application using the library is working. Arbitrary code is executed or service operation is interrupted via the network or locally (DoS) There is a possibility of being attacked. This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85. HP All-in-One Series Web Release and HP Photo and Imaging Gallery are prone to a heap-based buffer-overflow vulnerability because the applications fail to perform adequate boundary-checks on user-supplied data. Failed exploit attempts will result in a denial-of-service condition. Microsoft Windows is a series of operating systems released by Microsoft Corporation. Local attackers may use this vulnerability to elevate their own privileges. MFC[42|71].dll@CFileFind::FindFile(char const ,unsigned long) .text:73D6CD3F mov edi, edi .text:73D6CD41 push ebp .text:73D6CD42 push esi ; unsigned int .text:73D6CD43 push edi ; unsigned __int8 * .text:73D6CD44 mov esi, ecx .text:73D6CD46 call CFileFind::Close(void) .text:73D6CD4B push 140h ; int << 320 bytes .text:73D6CD50 call @operator new(uint) << buffer Allocate [1].text:73D6CD55 mov ebp, [esp+14h].text:73D6CD59 and dword ptr [esi+10h], 0 .text:73D6CD5D test ebp, ebp .text:73D6CD5F pop ecx .text:73D6CD60 mov [ esi+8], eax .text:73D6CD63 jnz short loc_73D6CD6A .text:73D6CD65 mov ebp, offset a__1 ; ".*" << si arg_0 == NULL .text:73D6CD6A loc_73D6CD6A; CODE XREF: CFileFind::.
BETA test the new Secunia Personal Software Inspector!
The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors.
Download the free PSI BETA from the Secunia website: https://psi.secunia.com/
TITLE: Microsoft Windows CFileFind Class "FindFile()" Buffer Overflow
SECUNIA ADVISORY ID: SA26800
VERIFY ADVISORY: http://secunia.com/advisories/26800/
CRITICAL: Moderately critical
IMPACT: System access
WHERE:
From remote
OPERATING SYSTEM: Microsoft Windows XP Professional http://secunia.com/product/22/
DESCRIPTION: Jonathan Sarba has discovered a vulnerability in Microsoft Windows, which potentially can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error in the "FindFile()" function of the CFileFind class in mfc42.dll and mfc42u.dll. This can be exploited to cause a heap-based buffer overflow by passing an overly long argument to the affected function.
SOLUTION: Restrict access to applications allowing user-controlled input to be passed to the vulnerable function.
Applications using the vulnerable library should check the length of the user input before passing it to the affected function.
PROVIDED AND/OR DISCOVERED BY: Jonathan Sarba, GoodFellas Security Research Team.
ORIGINAL ADVISORY: http://goodfellas.shellcode.com.ar/own/VULWKU200706142
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200709-0151",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "photo and imaging gallery",
"scope": "eq",
"trust": 1.6,
"vendor": "hp",
"version": "1.1"
},
{
"model": "all-in-on printer",
"scope": "eq",
"trust": 1.0,
"vendor": "hp",
"version": "*"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "hewlett packard",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "microsoft",
"version": null
},
{
"model": "mfc42.dll",
"scope": null,
"trust": 0.8,
"vendor": "microsoft",
"version": null
},
{
"model": "mfc70.dll",
"scope": null,
"trust": 0.8,
"vendor": "microsoft",
"version": null
},
{
"model": "photo and image gallery",
"scope": "eq",
"trust": 0.6,
"vendor": "hp",
"version": "1.1"
},
{
"model": "all-in-on printer",
"scope": null,
"trust": 0.6,
"vendor": "hp",
"version": null
},
{
"model": "windows xp tablet pc edition sp2",
"scope": null,
"trust": 0.3,
"vendor": "microsoft",
"version": null
},
{
"model": "windows xp professional sp2",
"scope": null,
"trust": 0.3,
"vendor": "microsoft",
"version": null
},
{
"model": "windows xp media center edition sp2",
"scope": null,
"trust": 0.3,
"vendor": "microsoft",
"version": null
},
{
"model": "windows xp home sp2",
"scope": null,
"trust": 0.3,
"vendor": "microsoft",
"version": null
},
{
"model": "all-in-one series web release",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "2.1"
},
{
"model": "all-in-one series web release",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:microsoft:mfc42.dll",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:microsoft:mfc70.dll",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Jonathan Sarba\u203b sarbaj@shellcode.com.ar",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
}
],
"trust": 0.6
},
"cve": "CVE-2007-4916",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2007-4916",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-28278",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-4916",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#611008",
"trust": 0.8,
"value": "12.93"
},
{
"author": "NVD",
"id": "CVE-2007-4916",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200709-214",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-28278",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2007-4916",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo \u0026 Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument. Microsoft Foundation Class (MFC) Included in library FindFile() The function contains a heap buffer overflow vulnerability. As a result, arbitrary code may be executed or service operation may be interrupted (DoS) There is a possibility of being attacked. Microsoft Foundation Class (MFC) The library Visual C++ Class library for MFC Is Microsoft Visual Studio And Microsoft Windows And may be used in many other applications. this MFC Included in the library FindFile() The function provides the ability to search for files from the entire file system. MFC42 Library and MFC70 Library FindFile() The function does not handle arguments properly, so heap buffer overflow vulnerability is included, resulting in arbitrary code execution and service disruption (DoS) There is a possibility of being attacked. \u003cJPCERT/CC Supplemental information from \u003e From Microsoft MFC 71 The library is not affected, MFC 70 It was confirmed that the library was affected. JVN So, with regard to the affected system, MFC 71 I mentioned it as a library. MFC 70 I corrected it to the library.Expected impact is affected MFC It depends on how the application using the library is working. Arbitrary code is executed or service operation is interrupted via the network or locally (DoS) There is a possibility of being attacked. \nThis issue also occurs in the \u0027hpqutil.dll\u0027 ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85. HP All-in-One Series Web Release and HP Photo and Imaging Gallery are prone to a heap-based buffer-overflow vulnerability because the applications fail to perform adequate boundary-checks on user-supplied data. Failed exploit attempts will result in a denial-of-service condition. Microsoft Windows is a series of operating systems released by Microsoft Corporation. Local attackers may use this vulnerability to elevate their own privileges. MFC[42|71].dll@CFileFind::FindFile(char const *,unsigned long) .text:73D6CD3F mov edi, edi .text:73D6CD41 push ebp .text:73D6CD42 push esi ; unsigned int .text:73D6CD43 push edi ; unsigned __int8 * .text:73D6CD44 mov esi, ecx .text:73D6CD46 call CFileFind::Close(void) .text:73D6CD4B push 140h ; int \u003c\u003c 320 bytes .text:73D6CD50 call @operator new(uint) \u003c\u003c buffer Allocate [1].text:73D6CD55 mov ebp, [esp+14h].text:73D6CD59 and dword ptr [esi+10h], 0 .text:73D6CD5D test ebp, ebp .text:73D6CD5F pop ecx .text:73D6CD60 mov [ esi+8], eax .text:73D6CD63 jnz short loc_73D6CD6A .text:73D6CD65 mov ebp, offset a__1 ; \"*.*\" \u003c\u003c si arg_0 == NULL .text:73D6CD6A loc_73D6CD6A; CODE XREF: CFileFind::. \n\n----------------------------------------------------------------------\n\nBETA test the new Secunia Personal Software Inspector!\n\nThe Secunia PSI detects installed software on your computer and\ncategorises it as either Insecure, End-of-Life, or Up-To-Date. \nEffectively enabling you to focus your attention on software\ninstallations where more secure versions are available from the\nvendors. \n\nDownload the free PSI BETA from the Secunia website:\nhttps://psi.secunia.com/\n\n----------------------------------------------------------------------\n\nTITLE:\nMicrosoft Windows CFileFind Class \"FindFile()\" Buffer Overflow\n\nSECUNIA ADVISORY ID:\nSA26800\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/26800/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSystem access\n\nWHERE:\n\u003eFrom remote\n\nOPERATING SYSTEM:\nMicrosoft Windows XP Professional\nhttp://secunia.com/product/22/\n\nDESCRIPTION:\nJonathan Sarba has discovered a vulnerability in Microsoft Windows,\nwhich potentially can be exploited by malicious people to compromise\na vulnerable system. \n\nThe vulnerability is caused due to a boundary error in the\n\"FindFile()\" function of the CFileFind class in mfc42.dll and\nmfc42u.dll. This can be exploited to cause a heap-based buffer\noverflow by passing an overly long argument to the affected\nfunction. \n\nSOLUTION:\nRestrict access to applications allowing user-controlled input to be\npassed to the vulnerable function. \n\nApplications using the vulnerable library should check the length of\nthe user input before passing it to the affected function. \n\nPROVIDED AND/OR DISCOVERED BY:\nJonathan Sarba, GoodFellas Security Research Team. \n\nORIGINAL ADVISORY:\nhttp://goodfellas.shellcode.com.ar/own/VULWKU200706142\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-4916"
},
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
},
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"db": "PACKETSTORM",
"id": "59323"
}
],
"trust": 3.15
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=4409",
"trust": 0.2,
"type": "exploit"
},
{
"reference": "https://www.scap.org.cn/vuln/vhn-28278",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#611008",
"trust": 3.7
},
{
"db": "SECUNIA",
"id": "26800",
"trust": 3.5
},
{
"db": "NVD",
"id": "CVE-2007-4916",
"trust": 2.9
},
{
"db": "BID",
"id": "25697",
"trust": 2.9
},
{
"db": "SECTRACK",
"id": "1018698",
"trust": 2.6
},
{
"db": "BID",
"id": "25673",
"trust": 2.1
},
{
"db": "VUPEN",
"id": "ADV-2007-3182",
"trust": 1.8
},
{
"db": "SREASON",
"id": "3143",
"trust": 1.8
},
{
"db": "XF",
"id": "36608",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698",
"trust": 0.8
},
{
"db": "XF",
"id": "36609",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20070914 [GOODFELLAS-VULN] FILEFIND CLASS FROM MFC LIBRARY CAUSE HEAPOVERFLOW",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20070914 [GOODFELLAS-VULN] ACTIVEX HPQUTIL!LISTFILES HPQUTIL.DLL - REMOTEHEAP OVERFLOW",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "4409",
"trust": 0.2
},
{
"db": "EXPLOIT-DB",
"id": "30593",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-83968",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-28278",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2007-4916",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "59323",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "PACKETSTORM",
"id": "59323"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"id": "VAR-200709-0151",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-28278"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:01:05.350000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "CFileFind::FindFile (MFC)",
"trust": 0.8,
"url": "http://msdn2.microsoft.com/ja-jp/library/x4dz98yx(VS.80).aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://goodfellas.shellcode.com.ar/own/vulwku200706142"
},
{
"trust": 3.0,
"url": "http://www.kb.cert.org/vuls/id/611008"
},
{
"trust": 2.7,
"url": "http://www.securityfocus.com/bid/25697"
},
{
"trust": 2.6,
"url": "http://www.securitytracker.com/id?1018698"
},
{
"trust": 2.6,
"url": "http://secunia.com/advisories/26800"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/25673"
},
{
"trust": 1.8,
"url": "http://goodfellas.shellcode.com.ar/own/vulwar200706041"
},
{
"trust": 1.8,
"url": "http://securityreason.com/securityalert/3143"
},
{
"trust": 1.4,
"url": "http://www.frsirt.com/english/advisories/2007/3182"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/36608"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/archive/1/479442/100/0/threaded"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/archive/1/479443/100/0/threaded"
},
{
"trust": 1.2,
"url": "http://www.vupen.com/english/advisories/2007/3182"
},
{
"trust": 1.2,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36609"
},
{
"trust": 1.2,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36608"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/26800/"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-4916"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu%23611008/index.html"
},
{
"trust": 0.8,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2007-4916"
},
{
"trust": 0.6,
"url": "http://support.microsoft.com/kb/240797"
},
{
"trust": 0.6,
"url": "/archive/1/479442"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/479443/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/479442/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/36609"
},
{
"trust": 0.3,
"url": "http://www.hp.com/"
},
{
"trust": 0.3,
"url": "http://www.microsoft.com/windows/default.mspx"
},
{
"trust": 0.3,
"url": "/archive/1/479443"
},
{
"trust": 0.3,
"url": "http://www.hp.com"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/4409/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/22/"
},
{
"trust": 0.1,
"url": "https://psi.secunia.com/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "PACKETSTORM",
"id": "59323"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#611008"
},
{
"db": "VULHUB",
"id": "VHN-28278"
},
{
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"db": "PACKETSTORM",
"id": "59323"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-09-20T00:00:00",
"db": "CERT/CC",
"id": "VU#611008"
},
{
"date": "2007-09-17T00:00:00",
"db": "VULHUB",
"id": "VHN-28278"
},
{
"date": "2007-09-17T00:00:00",
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"date": "2007-09-14T00:00:00",
"db": "BID",
"id": "25697"
},
{
"date": "2007-09-14T00:00:00",
"db": "BID",
"id": "25673"
},
{
"date": "2007-09-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"date": "2007-09-18T14:57:18",
"db": "PACKETSTORM",
"id": "59323"
},
{
"date": "2007-09-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"date": "2007-09-17T17:17:00",
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-09-21T00:00:00",
"db": "CERT/CC",
"id": "VU#611008"
},
{
"date": "2018-10-15T00:00:00",
"db": "VULHUB",
"id": "VHN-28278"
},
{
"date": "2018-10-15T00:00:00",
"db": "VULMON",
"id": "CVE-2007-4916"
},
{
"date": "2015-05-12T19:49:00",
"db": "BID",
"id": "25697"
},
{
"date": "2007-09-20T20:50:00",
"db": "BID",
"id": "25673"
},
{
"date": "2008-01-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000698"
},
{
"date": "2007-10-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200709-214"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-4916"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "network",
"sources": [
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Microsoft MFC FindFile function heap buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#611008"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Boundary Condition Error",
"sources": [
{
"db": "BID",
"id": "25697"
},
{
"db": "BID",
"id": "25673"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…