Unscored severity · published Aug 23, 2010
CVE-2010-3106
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute…
–
CVSS
37.3%
EPSS
No
On KEV
Description
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.
Exploitation
Is it being used?
Exploit prediction (EPSS)37.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iprint · Novell
through 5.40; 4.26; 4.27; 4.28; 4.30; 4.32; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3106
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3106
Patch
http://download.novell.com/Download?buildid=ftwZBxEFjIg~
Patch
http://dvlabs.tippingpoint.com/advisory/TPTI-10-06
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044
More from Iprint
8.8
CVE-2010-4314
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter
–
CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors
–
CVE-2013-1091
Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2012-0411
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action
–
CVE-2011-4187
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm…