CVE-2010-4314

HIGH

Novell iPrint < 5.42 - Remote Code Execution via ActiveX Plugin Name Parameter Overflow

Title source: llm
STIX 2.1

Description

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.novell.com/support/kb/doc.php?id=7006675

Scores

CVSS v3 8.8
EPSS 0.0200
EPSS Percentile 83.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
n/a/Novell iPrint webrowser ActiveX plugin Novell iPrint webrowser ActiveX plugin
novell/iprint < 5.40
Published Mar 11, 2017
Tracked Since Feb 18, 2026