CVE-2011-1701 Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
HighCVSS 9.3
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell iprint | <= 5.60 | No fix listed |
| novell iprint | = 4.26 | No fix listed |
| novell iprint | = 4.27 | No fix listed |
| novell iprint | = 4.28 | No fix listed |
| novell iprint | = 4.30 | No fix listed |
| novell iprint | = 4.32 | No fix listed |
| novell iprint | = 4.34 | No fix listed |
| novell iprint | = 4.36 | No fix listed |
| novell iprint | = 4.38 | No fix listed |
| novell iprint | = 5.04 | No fix listed |
| novell iprint | = 5.12 | No fix listed |
| novell iprint | = 5.20b | No fix listed |
| novell iprint | = 5.30 | No fix listed |
| novell iprint | = 5.32 | No fix listed |
| novell iprint | = 5.40 | No fix listed |
| novell iprint | = 5.42 | No fix listed |
| novell iprint | = 5.44 | No fix listed |
| novell iprint | = 5.50 | No fix listed |
| novell iprint | = 5.52 | No fix listed |
| novell iprint | = 5.56 | No fix listed |
References
- download.novell.com patch
- 44811 third-party-advisory
- www.novell.com patch vendor-advisory
- 20110606 ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability mailing-list
- 48124 vdb-entry
- 1025606 vdb-entry
- zerodayinitiative.com
- novell-iprint-profilename-bo(67876) vdb-entry