CVE-2008-2908
Novell iPrint Client < 4.35 - Remote Code Execution via ActiveX Control Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-2908.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/novelliprint_getdriversettings.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Novell iPrint Client 4.34 via the GetDriverSettings() property of the ienipp.ocx ActiveX control. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
Description
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter. NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit targets a stack buffer overflow in Novell iPrint Client 4.34 via the GetDriverSettings() property of the ienipp.ocx ActiveX control. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Novell iPrint Client 4.34 by sending an overly long string to the GetDriverSettings() property of ienipp.ocx, allowing arbitrary code execution. The exploit uses JavaScript to craft a malicious payload and trigger the vulnerability via an ActiveX control.