CVE-2011-1701
Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
Desbordamiento de búfer basado en memoria dinámica en nipplib.dll de Novell iPrint Client ,permite a atacantes remotos ejecutar código arbitrario a través de un parámetro profile-name manipulado en una url de impresora.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The flaw exists within the nipplib component which is used by both the ActiveX and Netscape compatible browser plugins. When handling the profile-name parameter from the user specified printer-url the process blindly copies user supplied data into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
*Credits:
Ivan Rodriguez Almuina
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-04-15 CVE Reserved
- 2011-06-06 CVE Published
- 2024-08-06 CVE Updated
- 2024-11-04 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/44811 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/518269/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/48124 | Vdb Entry | |
| http://www.securitytracker.com/id?1025606 | Vdb Entry | |
| http://zerodayinitiative.com/advisories/ZDI-11-174 | X_refsource_misc | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/67876 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://download.novell.com/Download?buildid=6_bNby38ERg~ | 2018-10-09 | |
| http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008723 | 2018-10-09 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | <= 5.60 Search vendor "Novell" for product "Iprint" and version " <= 5.60" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.26 Search vendor "Novell" for product "Iprint" and version "4.26" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.27 Search vendor "Novell" for product "Iprint" and version "4.27" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.28 Search vendor "Novell" for product "Iprint" and version "4.28" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.30 Search vendor "Novell" for product "Iprint" and version "4.30" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.32 Search vendor "Novell" for product "Iprint" and version "4.32" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.34 Search vendor "Novell" for product "Iprint" and version "4.34" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.36 Search vendor "Novell" for product "Iprint" and version "4.36" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 4.38 Search vendor "Novell" for product "Iprint" and version "4.38" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.04 Search vendor "Novell" for product "Iprint" and version "5.04" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.12 Search vendor "Novell" for product "Iprint" and version "5.12" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.20b Search vendor "Novell" for product "Iprint" and version "5.20b" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.30 Search vendor "Novell" for product "Iprint" and version "5.30" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.32 Search vendor "Novell" for product "Iprint" and version "5.32" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.40 Search vendor "Novell" for product "Iprint" and version "5.40" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.42 Search vendor "Novell" for product "Iprint" and version "5.42" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.44 Search vendor "Novell" for product "Iprint" and version "5.44" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.50 Search vendor "Novell" for product "Iprint" and version "5.50" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.52 Search vendor "Novell" for product "Iprint" and version "5.52" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Iprint Search vendor "Novell" for product "Iprint" | 5.56 Search vendor "Novell" for product "Iprint" and version "5.56" | - |
Affected
| ||||||