CVE-2008-5231

2008-11-2601:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-5231

novell iprint

buffer overflow

remote code execution

activex

nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.039 Low

EPSS

Percentile

91.9%

JSON

Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431.

CPENameOperatorVersion
novell:iprintnovell iprinteq4.34
novell:iprintnovell iprinteq4.38
novell:iprintnovell iprinteq4.27
novell:iprintnovell iprinteq4.32
novell:iprintnovell iprintle5.04
novell:iprintnovell iprinteq4.26
novell:iprintnovell iprinteq4.36
novell:iprintnovell iprinteq4.28
novell:iprintnovell iprinteq4.30

CPE	Name	Operator	Version
novell:iprint	novell iprint	eq	4.34
novell:iprint	novell iprint	eq	4.38
novell:iprint	novell iprint	eq	4.27
novell:iprint	novell iprint	eq	4.32
novell:iprint	novell iprint	le	5.04
novell:iprint	novell iprint	eq	4.26
novell:iprint	novell iprint	eq	4.36
novell:iprint	novell iprint	eq	4.28
novell:iprint	novell iprint	eq	4.30