Unscored severity · published Dec 8, 2009
CVE-2009-1569
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors…
–
CVSS
37.5%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.
Exploitation
Is it being used?
Exploit prediction (EPSS)37.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iprint · Novell
4.38; 5.30 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1569
Patch
http://download.novell.com/Download?buildid=29T3EFRky18~
Vendor Advisory
http://secunia.com/advisories/35004
Vendor Advisory
http://secunia.com/advisories/37169
Vendor Advisory
http://secunia.com/secunia_research/2009-44/
www.securityfocus.com
http://www.securityfocus.com/archive/1/508288/100/0/threaded
Patch
http://www.securityfocus.com/bid/37242
More from Iprint
8.8
CVE-2010-4314
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter
–
CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors
–
CVE-2013-1091
Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2012-0411
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action
–
CVE-2011-4187
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm…
