Novell.iPrint.ActiveX.Code.Execution

Description

This indicates an attempt to exploit a buffer-overflow vulnerability in Novell iPrint Client.
An error in the ActiveX control 'ienipp.ocx' makes it possible for an attacker to cause a buffer overflow. This can be accomplished by sending an excessively long string argument to the ExecuteRequest() method or GetDriverSettings() method. As a result, the attacker can cause a denial of service or execute arbitrary code on the victim's system.

Affected Products

Novell iPrint Client before 4.34.

Impact

System Compromise: remote attackers can gain control of vulnerable systems.
Denial of Service.

Recommended Actions

Upgrade to version 4.34, available from the web site.
http://download.novell.com/Download?buildid=prBBH4JpImA~

References

http://www.exploit-db.com/exploits/15073/ http://www.exploit-db.com/exploits/15001/ http://www.exploit-db.com/exploits/15073/ http://secunia.com/advisories/30709/