Unscored severity · published Aug 23, 2010
CVE-2010-3108
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long…
–
CVSS
5.2%
EPSS
No
On KEV
Description
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iprint · Novell
through 5.40; 4.26; 4.27; 4.28; 4.30; 4.32; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3108
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3108
Patch
http://download.novell.com/Download?buildid=ftwZBxEFjIg~
Patch
http://www.zerodayinitiative.com/advisories/ZDI-10-139/
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915
More from Iprint
8.8
CVE-2010-4314
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter
–
CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors
–
CVE-2013-1091
Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2012-0411
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action
–
CVE-2011-4187
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm…