Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-1527.
PoCs published by Trancer, Abysssec, including Metasploit module exploits/windows/browser/novelliprint_callbackurl.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via an overly long 'call-back-url' parameter. It achieves remote code execution by leveraging heap spraying and shellcode injection.
Description
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via an overly long 'call-back-url' parameter. It achieves remote code execution by leveraging heap spraying and shellcode injection.
This exploit targets a stack overflow vulnerability in the Novell iPrint Client Browser Plugin (CVE-2010-1527) by crafting a malicious HTML file with an oversized 'call-back-url' parameter. The payload includes shellcode designed to execute calc.exe via a heap spray technique.
This Metasploit module exploits a stack-based buffer overflow in the Novell iPrint Client ActiveX control (ienipp.ocx) via an overly long 'call-back-url' parameter. It delivers a payload through a malicious HTML page targeting vulnerable versions of the iPrint Client on Windows XP/Vista with IE 6/7.