CVE-2010-3106

Currently unrated

Key Information:

Vendor
Novell
Status
Iprint
Vendor
CVE Published:
23 August 2010

Summary

The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.

References

http://dvlabs.tippingpoint.com/advisory/TPTI-10-06
x_refsource_MISC
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://download.novell.com/Download?buildid=ftwZBxEFjIg~
x_refsource_CONFIRM

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.