CVE-2010-3106
Novell iPrint Client - ActiveX Control 'debug' Remote Buffer Overflow
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.
El control ActiveX ienipp.ocx en el plugin para el navegador en el cliente de Novell iPrint antes de v5.42 no valida correctamente el parámetro debug, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (por corrupción de memoria de pila) a través de un parámetro value con una longitud modificada a mano. Se trata de una vulnerabilidad relacionada con el método ExecuteRequest.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-08-23 CVE Reserved
- 2010-08-23 CVE Published
- 2010-09-21 First Exploit
- 2024-08-07 CVE Updated
- 2024-08-25 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/15073 | 2010-09-21 | |
| https://www.exploit-db.com/exploits/16492 | 2010-09-21 |
| URL | Date | SRC |
|---|---|---|
| http://download.novell.com/Download?buildid=ftwZBxEFjIg~ | 2017-09-19 | |
| http://dvlabs.tippingpoint.com/advisory/TPTI-10-06 | 2017-09-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | <= 5.40 Search vendor "Novell" for product "Iprint" and version " <= 5.40" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.26 Search vendor "Novell" for product "Iprint" and version "4.26" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.27 Search vendor "Novell" for product "Iprint" and version "4.27" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.28 Search vendor "Novell" for product "Iprint" and version "4.28" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.30 Search vendor "Novell" for product "Iprint" and version "4.30" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.32 Search vendor "Novell" for product "Iprint" and version "4.32" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.34 Search vendor "Novell" for product "Iprint" and version "4.34" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.36 Search vendor "Novell" for product "Iprint" and version "4.36" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.38 Search vendor "Novell" for product "Iprint" and version "4.38" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.04 Search vendor "Novell" for product "Iprint" and version "5.04" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.12 Search vendor "Novell" for product "Iprint" and version "5.12" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.20b Search vendor "Novell" for product "Iprint" and version "5.20b" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.30 Search vendor "Novell" for product "Iprint" and version "5.30" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.32 Search vendor "Novell" for product "Iprint" and version "5.32" | - |
Affected
| ||||||