CVE-2011-1707 Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell iprint | <= 5.60 | No fix listed |
| novell iprint | = 4.26 | No fix listed |
| novell iprint | = 4.27 | No fix listed |
| novell iprint | = 4.28 | No fix listed |
| novell iprint | = 4.30 | No fix listed |
| novell iprint | = 4.32 | No fix listed |
| novell iprint | = 4.34 | No fix listed |
| novell iprint | = 4.36 | No fix listed |
| novell iprint | = 4.38 | No fix listed |
| novell iprint | = 5.04 | No fix listed |
| novell iprint | = 5.12 | No fix listed |
| novell iprint | = 5.20b | No fix listed |
| novell iprint | = 5.30 | No fix listed |
| novell iprint | = 5.32 | No fix listed |
| novell iprint | = 5.40 | No fix listed |
| novell iprint | = 5.42 | No fix listed |
| novell iprint | = 5.44 | No fix listed |
| novell iprint | = 5.50 | No fix listed |
| novell iprint | = 5.52 | No fix listed |
| novell iprint | = 5.56 | No fix listed |
References
- download.novell.com patch
- 44811 third-party-advisory
- 20110606 ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability mailing-list
- 48124 vdb-entry
- 1025606 vdb-entry
- zerodayinitiative.com
- novell-iprint-opprinterlistalljobs-bo(67883) vdb-entry