Description
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
References
- 1025606 vdb-entry
- http://download.novell.com/Download?buildid=6_bNby38ERg~
- 44811 third-party-advisory
- 48124 vdb-entry
- novell-iprint-profilename-bo(67876) vdb-entry
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008723
- http://zerodayinitiative.com/advisories/ZDI-11-174/
- 20110606 ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability mailing-list