critical9.3Public exploit code
CVE-2010-1527
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell iPrint Client - ActiveX Control call-back-url Buffer Overflow (Metasploit)2010-09-21 · remote · windows · Verified
- Novell iPrint Client Browser Plugin - 'call-back-url' Remote Stack Overflow2010-09-19 · remote · windows · Verified
Impact
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Iprint | through 5.42 Versions 4.26, 4.27, 4.28, 4.30, 4.32 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/40805
- http://secunia.com/secunia_research/2010-104/
- http://www.novell.com/support/viewContent.do?externalId=7006679
- http://www.securityfocus.com/bid/42576
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61220
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973
- http://secunia.com/advisories/40805
- http://secunia.com/secunia_research/2010-104/
- http://www.novell.com/support/viewContent.do?externalId=7006679
- http://www.securityfocus.com/bid/42576
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61220
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973