Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2007-4916

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows系统中所提供的MFC42和MFC71库的CFileFind类在处理FindFile()函数参数时存在堆溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 MFC[42

AI Predicted 6.8 Difficulty: Easy EPSS 19.67% · P97 Updated Feb 27, 2026

Public Exploits 2

ExploitDB · 2 EDB-4409 [dos] EDB-30593 [dos]

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2007-4916

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Microsoft MFC库CFileFind::FindFile堆溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows系统中所提供的MFC42和MFC71库的CFileFind类在处理FindFile()函数参数时存在堆溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 MFC[42|71].dll@CFileFind::FindFile(char const *,unsigned long) .text:73D6CD3F mov edi, edi .text:73D6CD41 push ebp .text:73D

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2007-4916

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2007-4916

请登录查看更多情报信息。

Vendor Advisories for CVE-2007-4916 (9)

http://secunia.com/advisories/26800 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/25673 vdb-entry x_refsource_BID
http://www.securityfocus.com/bid/25697 vdb-entry x_refsource_BID
http://www.securitytracker.com/id?1018698 vdb-entry x_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/611008 third-party-advisory x_refsource_CERT-VN
https://exchange.xforce.ibmcloud.com/vulnerabilities/36608 vdb-entry x_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/36609 vdb-entry x_refsource_XF
http://www.securityfocus.com/archive/1/479443/100/0/threaded mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/479442/100/0/threaded mailing-list x_refsource_BUGTRAQ

Other References for CVE-2007-4916 (3)

http://goodfellas.shellcode.com.ar/own/VULWAR200706041 x_refsource_MISC
http://goodfellas.shellcode.com.ar/own/VULWKU200706142 x_refsource_MISC
http://securityreason.com/securityalert/3143 third-party-advisory x_refsource_SREASON

https://www.cve.org/CVERecord?id=CVE-2007-4916

Same Patch Batch · n/a · 2007-09-17 · 25 CVEs total

CVE-2007-4919		JBlog id参数多个SQL注入漏洞
CVE-2007-4908		AuraCMS Index.PHP 本地文件包含漏洞
CVE-2007-4907		Qualiteam X-Cart xcart_dir 多个远程文件包含漏洞
CVE-2007-4906		NuclearBB NuclearBB NuclearBB Alpha 代码注入漏洞
CVE-2007-4905		AuraCMS mod/contak.php 任意文件上传漏洞
CVE-2007-4904		RealNetworks RealPlayer 数字错误漏洞
CVE-2007-4903		Ultra Crypto Component CryptoX.dll控件远程溢出漏洞
CVE-2007-4902		Ultra Crypto Component SaveToFile方式任意文件覆盖漏洞
CVE-2007-4923		Joomla! Joomla!Radio组件本地文件包含漏洞
CVE-2007-4922		模块jeuxflash for Kwsphp id参数SQL注入漏洞
CVE-2007-4921		Ajax File Browser 代码注入漏洞
CVE-2007-4920		PHP Webquest Soporte_Derecha_W.PHP Parameter SQL注入漏洞
CVE-2007-3379		Red Hat Enterprise Linux (RHEL) 4 内核拒绝服务攻击漏洞
CVE-2007-4918		Gelato CMS Index.PHP SQL注入漏洞
CVE-2007-4917		Php-Stats Tracking.PHP 跨站脚本攻击漏洞
CVE-2007-4915		Intersil Boa Webserver 输入验证漏洞
CVE-2007-4914		Invision Power Board用户配置文件和订单管理器多个输入验证漏洞
CVE-2007-4913		Invision Invision Power Services Invision Power Board 代码注入漏洞
CVE-2007-4912		Invision Power Board用户配置文件和订单管理器多个输入验证漏洞
CVE-2007-4911		jetCast Server HTTP请求远程拒绝服务漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2007-4916

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2007-4916

Quick assessment

Public Exploits 2

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2007-4916

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2007-4916

III. Intelligence Information for CVE-2007-4916

Vendor Advisories for CVE-2007-4916 (9)

Other References for CVE-2007-4916 (3)

Same Patch Batch · n/a · 2007-09-17 · 25 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2007-4916

Leave a comment