Description
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.
References
- 20110606 ZDI-11-175: Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulnerability mailing-list
- 1025606 vdb-entry
- novell-iprint-filedatetime-bo(67877) vdb-entry
- http://download.novell.com/Download?buildid=6_bNby38ERg~
- http://zerodayinitiative.com/advisories/ZDI-11-175/
- 44811 third-party-advisory
- 48124 vdb-entry
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008724