CVE-2009-1568

Novell Iprint Client - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16523

View Code ZIP pw:eip

metasploit WORKING POC GREAT

by jduck · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprint_target_frame.rb

View Code ZIP pw:eip

References (6)

[Patch] http://download.novell.com/Download?buildid=29T3EFRky18~

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/508289/100/0/threaded

[Vendor Advisory] http://secunia.com/secunia_research/2009-40/

[Patch, Vendor Advisory] http://www.vupen.com/english/advisories/2009/3429

[Patch] http://www.securityfocus.com/bid/37242

[Vendor Advisory] http://secunia.com/advisories/37169

Scores

EPSS 0.6101

EPSS Percentile 98.3%

Details

CWE

CWE-119

Status published

Products (2)

novell/iprint_client 5.30

novell/iprint_client 5.31

Published Dec 08, 2009

Tracked Since Feb 18, 2026