CVE-2010-1527

This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via an overly long 'call-back-url' parameter. It achieves remote code execution by leveraging heap spraying and shellcode injection.

This exploit targets a stack overflow vulnerability in the Novell iPrint Client Browser Plugin (CVE-2010-1527) by crafting a malicious HTML file with an oversized 'call-back-url' parameter. The payload includes shellcode designed to execute calc.exe via a heap spray technique.

This Metasploit module exploits a stack-based buffer overflow in the Novell iPrint Client ActiveX control (ienipp.ocx) via an overly long 'call-back-url' parameter. It delivers a payload through a malicious HTML page targeting vulnerable versions of the iPrint Client on Windows XP/Vista with IE 6/7.