Buffer overflow in Novell Iprint

CVE-2010-3105

The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: Buffer Overflow

EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.

Affected products

Novell Iprint — versions 4.34, 5.32, 5.20b
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)