CVE-2009-1569
Novell iPrint Client 4.38, 5.30 - Stack-Based Buffer Overflow via Date and Time Handling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1569.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/browser/novelliprint_datetime.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Novell iPrint Client 5.30 via a crafted date/time string passed to the ienipp.ocx ActiveX control. It achieves remote code execution by leveraging a JMP ESP instruction in the vulnerable control.
Description
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in Novell iPrint Client 5.30 via a crafted date/time string passed to the ienipp.ocx ActiveX control. It achieves remote code execution by leveraging a JMP ESP instruction in the vulnerable control.
This Metasploit module exploits a stack buffer overflow in Novell iPrint Client 5.30 via a crafted date/time string passed to the ienipp.ocx ActiveX control. It achieves remote code execution by leveraging a JMP ESP instruction in the vulnerable component.