PT-2010-4552 · Novell · Novell Iprint Client

Published 2010-08-23 · Updated 2017-09-19 · CVE-2010-3106

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.42

Description The issue is related to the ienipp.ocx ActiveX control in the browser plugin, which does not properly validate the debug parameter. This allows remote attackers to execute arbitrary code or cause a denial of service due to stack memory corruption by providing a parameter value with a crafted length, related to the ExecuteRequest method.

Recommendations For versions prior to 5.42, update to version 5.42 or later to resolve the issue. As a temporary workaround, consider disabling the ExecuteRequest method until a patch is available. Restrict access to the ienipp.ocx ActiveX control to minimize the risk of exploitation. Avoid using the debug parameter in the affected ActiveX control until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-3106

Affected Products

Novell Iprint Client

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprint_executerequest_dbg.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16492 · Exploit
• 🔥 https://exploit-db.com/exploits/15073 · Exploit
• http://dvlabs.tippingpoint.com/advisory/TPTI-10-06 · Patch
• http://download.novell.com/Download?buildid=ftwZBxEFjIg~ · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-3106 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044 · Note