PT-2008-6373 · Novell · Novell Iprint Activex Control+1

Publicado 2008-11-26 · Atualizado 2008-11-26 · CVE-2008-5231

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions 5.06 and earlier

Description A stack-based buffer overflow issue exists in the ExecuteRequest method of the Novell iPrint ActiveX control, which can be exploited by remote attackers to execute arbitrary code. This is achieved by providing a long target-frame option value.

Recommendations For Novell iPrint Client versions 5.06 and earlier, consider disabling the ExecuteRequest method in the ienipp.ocx ActiveX control as a temporary workaround until a patch is available. Restrict access to the Novell iPrint ActiveX control to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5231

Produtos afetados

Novell Iprint Activex Control

Novell Iprint Client

Referências · 4

• http://securityfocus.com/bid/30813 · Nota
• http://secunia.com/advisories/30667 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5231 · Nota de Segurança
• http://secunia.com/secunia_research/2008-27/advisory · Nota