Novell iPrint Client Multiple Remote Code Execution Vulnerabilities

Last Update Date: 28 Jan 2011 Release Date: 10 Dec 2010 4739 Views

RISK: Medium Risk

Multiple vulnerabilities have been identified in Novell iPrint Client, which could be exploited by remote attackers to execute arbitrary code. These issues are caused by buffer overflow errors related to Netscape/ActiveX "printer-state-reasons", "nipplib.dll", "call-back-url", and "Location:" header, which could be exploited by attackers to compromise a vulnerable system by convincing a user to visit a specially crafted web page.

Impact

Remote Code Execution

System / Technologies affected

Novell iPrint Client for Windows version 5.52 and prior

Solutions

It is not aware of any vendor-supplied patch.

Vulnerability Identifier

No CVE information is available

Source

VUPEN