CVE-2011-4185

2012-02-2113:31:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-4185

novell

iprint client

activex

remote code execution

windows

memory corruption

cve-2008-2431

cve-2008-2436

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.9%

JSON

The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436.

CPENameOperatorVersion
novell:iprintnovell iprintle5.74
novell:iprintnovell iprinteq4.26
novell:iprintnovell iprinteq4.27
novell:iprintnovell iprinteq4.28
novell:iprintnovell iprinteq4.30
novell:iprintnovell iprinteq4.32
novell:iprintnovell iprinteq4.34
novell:iprintnovell iprinteq4.36
novell:iprintnovell iprinteq4.38
novell:iprintnovell iprinteq5.04

CPE	Name	Operator	Version
novell:iprint	novell iprint	le	5.74
novell:iprint	novell iprint	eq	4.26
novell:iprint	novell iprint	eq	4.27
novell:iprint	novell iprint	eq	4.28
novell:iprint	novell iprint	eq	4.30
novell:iprint	novell iprint	eq	4.32
novell:iprint	novell iprint	eq	4.34
novell:iprint	novell iprint	eq	4.36
novell:iprint	novell iprint	eq	4.38
novell:iprint	novell iprint	eq	5.04