PT-2008-6373 · Novell · Novell Iprint Activex Control+1

Published 2008-11-26 · Updated 2008-11-26 · CVE-2008-5231

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions 5.06 and earlier

Description A stack-based buffer overflow issue exists in the ExecuteRequest method of the Novell iPrint ActiveX control, which can be exploited by remote attackers to execute arbitrary code. This is achieved by providing a long target-frame option value.

Recommendations For Novell iPrint Client versions 5.06 and earlier, consider disabling the ExecuteRequest method in the ienipp.ocx ActiveX control as a temporary workaround until a patch is available. Restrict access to the Novell iPrint ActiveX control to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-5231

Affected Products

Novell Iprint Activex Control

Novell Iprint Client

References · 4

• http://secunia.com/advisories/30667 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5231 · Security Note
• http://securityfocus.com/bid/30813 · Note
• http://secunia.com/secunia_research/2008-27/advisory · Note