Buffer overflow in Novell Iprint

CVE-2010-3108

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names.

Vulnerability class: Buffer Overflow

EPSS: 0.075 (92.0th percentile) — read the EPSS interpretation.

Affected products

Novell Iprint — versions 4.34, 5.32, 5.20b
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Patch)
oval:org.mitre.oval:def:11915 (x_refsource_OVAL, signature, vdb-entry)