Remote Code Execution Vulnerability in Novell iPrint Client
CVE-2010-4321

Currently unrated

Key Information:

Vendor

Novell
Status
Iprint Client
Vendor
CVE Published:
30 December 2010

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 32%

What is CVE-2010-4321?

The vulnerability in the Novell iPrint Client 5.52 involves a stack-based buffer overflow within the ActiveX control ienipp.ocx. This flaw allows remote attackers to execute arbitrary code by sending specially crafted arguments to the GetDriverSettings2 method, which can be reached through the GetDriverSettings method. Such an exploit could lead to unauthorized access and control over affected systems, posing serious security risks to users. It is crucial for organizations to patch this vulnerability to safeguard their environments.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-4321 - Proof of Concept

References

http://securityreason.com/securityalert/8125
third-party-advisoryx_refsource_SREASON
http://www.novell.com/support/viewContent.do?externalId=7...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/44966
vdb-entryx_refsource_BID

EPSS Score

32% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.