Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
BID:27939
Info
Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 27939 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0935 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 21 2008 12:00AM |
| Updated: | Nov 04 2008 08:05PM |
| Credit: | Paul Kurczaba discovered this vulnerability. |
| Vulnerable: |
Novell iPrint Client 'ienipp.ocx' ActiveX control 4.32 Novell iPrint Client 'ienipp.ocx' ActiveX control 4.26 |
| Not Vulnerable: |
Novell iPrint Client 'ienipp.ocx' ActiveX control 4.34 |
Discussion
Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
Novell iPrint Client 'ienipp.ocx' ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
The issue affects iPrint Client 4.26 and 4.32; other versions may also be vulnerable.
Novell iPrint Client 'ienipp.ocx' ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
The issue affects iPrint Client 4.26 and 4.32; other versions may also be vulnerable.
Exploit / POC
Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
The Symantec DeepSight team has confirmed that this issue could be used to execute code or crash the vulnerable application.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The Symantec DeepSight team has confirmed that this issue could be used to execute code or crash the vulnerable application.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
Solution:
The vendor has released patches to upgrade this issue. Please see the references for more information.
Solution:
The vendor has released patches to upgrade this issue. Please see the references for more information.
References
Novell iPrint Client 'ienipp.ocx' ActiveX Control Buffer Overflow Vulnerability
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Novell iPrint Client for Windows 4.34 Download (Novell)
- Novell iPrint Overview (Novell)