CVSS: 10.0EPSS: 85%CPEs: 25EXPL: 0CVE-2011-4187 – Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-4187
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173. Desbordamiento de búfer en la función GetDriverSettings en ??nipplib.dll en el cliente de Novell iPrint antes de v5.78 en Windows permite a atacantes remotos ejecutar código de su elección a través de un campo de dominio de largo. Se trata de una vulnerabilidad diferente a CVE-2011-3173. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. • http://www.novell.com/support/viewContent.do?externalId=7008708 http://www.novell.com/support/viewContent.do?externalId=7010143 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 2%CPEs: 14EXPL: 0CVE-2010-3108
https://notcve.org/view.php?id=CVE-2010-3108
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names. Un desbordamiento de búfer en el plugin para el navegador en Novell iPrint Client antes de v5.42 permite a atacantes remotos ejecutar código arbitrario mediante el uso de elementos EMBED para pasar parámetros con nombres largos. • http://download.novell.com/Download?buildid=ftwZBxEFjIg~ http://www.zerodayinitiative.com/advisories/ZDI-10-139 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 5%CPEs: 15EXPL: 0CVE-2010-3105
https://notcve.org/view.php?id=CVE-2010-3105
The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. La función PluginGetDriverFile en Novell iPrint Client antes de v5.44 interpreta una posición de memoria no inicializada como un valor de puntero, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados. NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido únicamente de información de terceros. • http://secunia.com/advisories/40805 http://www.securityfocus.com/bid/42576 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11817 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 40%CPEs: 14EXPL: 0CVE-2010-3107
https://notcve.org/view.php?id=CVE-2010-3107
A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module. Un control ActiveX en ienipp.ocx en el plugin para el navegador del cliente de Novell iPrint antes de v5.42 no limita apropiadamente el conjunto de archivos que desea eliminar, lo que permite provocar a atacantes remotos una denegación de servicio (mediante eliminación de archivos de forma recursiva) a través de vectores no especificados relacionados con "fallo lógico" en el método CleanUploadFiles en el módulo nipplib.dll. • http://download.novell.com/Download?buildid=ftwZBxEFjIg~ http://dvlabs.tippingpoint.com/advisory/TPTI-10-05 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12074 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 2%CPEs: 14EXPL: 0CVE-2010-3109
https://notcve.org/view.php?id=CVE-2010-3109
Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter. Un desbordamiento de búfer basado en pila en el complemento del navegador en Novell iPrint Client antes de v5.42 permite a atacantes remotos ejecutar código arbitrario mediante un parámetro operation excesivamente largo. • http://download.novell.com/Download?buildid=ftwZBxEFjIg~ http://www.zerodayinitiative.com/advisories/ZDI-10-140 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12046 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •