PT-2010-4552 · Novell · Novell Iprint Client

Publicado 2010-08-23 · Atualizado 2017-09-19 · CVE-2010-3106

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.42

Description The issue is related to the ienipp.ocx ActiveX control in the browser plugin, which does not properly validate the debug parameter. This allows remote attackers to execute arbitrary code or cause a denial of service due to stack memory corruption by providing a parameter value with a crafted length, related to the ExecuteRequest method.

Recommendations For versions prior to 5.42, update to version 5.42 or later to resolve the issue. As a temporary workaround, consider disabling the ExecuteRequest method until a patch is available. Restrict access to the ienipp.ocx ActiveX control to minimize the risk of exploitation. Avoid using the debug parameter in the affected ActiveX control until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-3106

Produtos afetados

Novell Iprint Client

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprint_executerequest_dbg.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16492 · Exploit
• 🔥 https://exploit-db.com/exploits/15073 · Exploit
• http://dvlabs.tippingpoint.com/advisory/TPTI-10-06 · Correção
• http://download.novell.com/Download?buildid=ftwZBxEFjIg~ · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2010-3106 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044 · Nota