Unscored CVE-2008-2436 EUVD-2008-2431GHSA-96v9-mjjm-c4c5

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x befo…

Published Sep 5, 2008 · Updated Aug 7, 2024 · Assigned by flexera

Description

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

References

4228 third-party-advisory
1020806 vdb-entry
http://secunia.com/secunia_research/2008-33/advisory
novell-iprint-ippcreateserverref-bo(44853) vdb-entry
20080903 Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow mailing-list
30986 vdb-entry
ADV-2008-2481 vdb-entry
31370 third-party-advisory