CVE-2008-2436

2008-09-0516:08:00

CWE-94

[email protected]

web.nvd.nist.gov

cve

buffer overflow

remote code execution

novell iprint

activex

nipplib.dll

security vulnerability

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.226 Low

EPSS

Percentile

96.4%

JSON

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

CPENameOperatorVersion
novell:iprint_clientnovell iprint clienteq4.35
novell:iprint_clientnovell iprint clienteq4.32
novell:iprint_clientnovell iprint clienteq5.06
novell:iprint_clientnovell iprint clienteq4.26
novell:iprint_clientnovell iprint clienteq4.36

CPE	Name	Operator	Version
novell:iprint_client	novell iprint client	eq	4.35
novell:iprint_client	novell iprint client	eq	4.32
novell:iprint_client	novell iprint client	eq	5.06
novell:iprint_client	novell iprint client	eq	4.26
novell:iprint_client	novell iprint client	eq	4.36