CVE-2008-2436 Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via....
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell iprint client | = 4.26 | No fix listed |
| novell iprint client | = 4.32 | No fix listed |
| novell iprint client | = 4.35 | No fix listed |
| novell iprint client | = 4.36 | No fix listed |
| novell iprint client | = 5.06 | No fix listed |
References
- 31370 patch third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 4228 third-party-advisory
- 20080903 Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow mailing-list
- 30986 vdb-entry
- 1020806 vdb-entry
- ADV-2008-2481 vdb-entry
- novell-iprint-ippcreateserverref-bo(44853) vdb-entry