CVE-2010-3106
Novell iPrint < 5.42 - Remote Code Execution via ienipp.ocx Debug Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-3106.
PoCs published by Metasploit, Trancer, including Metasploit module exploits/windows/browser/novelliprint_executerequest_dbg.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via the 'debug' parameter in ExecuteRequest(). It achieves remote code execution by sending an overly long string to the vulnerable parameter.
Description
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via the 'debug' parameter in ExecuteRequest(). It achieves remote code execution by sending an overly long string to the vulnerable parameter.
This is a Metasploit module exploiting a stack-based buffer overflow in Novell iPrint Client ActiveX Control via the 'debug' parameter in ExecuteRequest(). It delivers a payload through a crafted HTML page targeting vulnerable versions of the iPrint Client.
This Metasploit module exploits a stack-based buffer overflow in the Novell iPrint Client ActiveX control by sending an overly long string to the 'debug' parameter in the ExecuteRequest() method, leading to arbitrary code execution.