Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Client ActiveX control named
Novell iPrint Client before 5.78 on Windows is vulnerable to a stack buffer overflow as a result of improper verification of a user-supplied realm parameter. The flaw exists within the exposed
**GetDriverSettings** method in the
**nipplib.dll** component imported by
**ienipp.ocx**. A remote attacker who persuades a user to visit a malicious web page with a specially crafted realm argument could exploit this vulnerability to execute arbitrary code in the context of the user.
Upgrade to iPrint Client for Windows 5.78 or later.
This exploit has been tested against Novell iPrint Client 5.74 on Windows XP SP3 English (DEP OptIn).
The user must open the exploit page in Internet Explorer 8.