CVE-2008-5231

2008-11-2601:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.471

Percentile

97.5%

JSON

Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431.

Affected configurations

Nvd

Node

novelliprintRange≤5.04

novelliprintMatch4.26

novelliprintMatch4.27

novelliprintMatch4.28

novelliprintMatch4.30

novelliprintMatch4.32

novelliprintMatch4.34

novelliprintMatch4.36

novelliprintMatch4.38

VendorProductVersionCPE
novelliprint*cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*
novelliprint4.26cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*
novelliprint4.27cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*
novelliprint4.28cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*
novelliprint4.30cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*
novelliprint4.32cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*
novelliprint4.34cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*
novelliprint4.36cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*
novelliprint4.38cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	iprint	*	cpe:2.3:a:novell:iprint::::::::
novell	iprint	4.26	cpe:2.3:a:novell:iprint:4.26:::::::*
novell	iprint	4.27	cpe:2.3:a:novell:iprint:4.27:::::::*
novell	iprint	4.28	cpe:2.3:a:novell:iprint:4.28:::::::*
novell	iprint	4.30	cpe:2.3:a:novell:iprint:4.30:::::::*
novell	iprint	4.32	cpe:2.3:a:novell:iprint:4.32:::::::*
novell	iprint	4.34	cpe:2.3:a:novell:iprint:4.34:::::::*
novell	iprint	4.36	cpe:2.3:a:novell:iprint:4.36:::::::*
novell	iprint	4.38	cpe:2.3:a:novell:iprint:4.38:::::::*