Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
Conclusion & alert: CVE-2007-4916 is rated High Exploit Risk (90.2/100): CVSS Critical severity, with high exploitation likelihood (EPSS 71.88%, 99th percentile). Core evidence: 2 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| 30593 | exploit_db | edb | 2007-09-14 | Exploit-DB ↗ |
| 4409 | exploit_db | edb | 2007-09-14 | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-05-06 | 71.29% | 71.88% | +0.59% |
| 2 | 2025-03-30 | 74.33% | 71.29% | -3.04% |
| 3 | 2025-03-29 | — | 74.33% | — |
Full EPSS history (16 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| hp | photo_and_imaging_gallery | 1.1 | cpe:2.3:a:hp:photo_and_imaging_gallery:1.1:*:*:*:*:*:*:* |
| hp | all-in-on_printer | — | cpe:2.3:h:hp:all-in-on_printer:*:*:*:*:*:*:*:* |