CVE-2008-2436: Code Injection

Published Sep 5, 2008

Updated

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

Affected Software

5 affected components

Novell iPrint Client=4.26

Novell iPrint Client=4.32

Novell iPrint Client=4.35

Novell iPrint Client=4.36

Novell iPrint Client=5.06

Remediation

Patch Available

http://secunia.com/advisories/31370

Event History

Sep 5, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2436?

CVE-2008-2436 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2008-2436?

To mitigate CVE-2008-2436, upgrade the Novell iPrint Client to version 4.38 or later for 4.x series and version 5.08 or later for 5.x series.

What software is affected by CVE-2008-2436?

CVE-2008-2436 affects Novell iPrint Client versions 4.26, 4.32, 4.35, 4.36, and 5.06.

What types of attacks can be executed due to CVE-2008-2436?

Due to CVE-2008-2436, attackers can exploit heap-based buffer overflows to execute arbitrary code.

What functions are involved in CVE-2008-2436?

The functions GetPrinterURLList, GetPrinterURLList2, and GetFileList2 are involved in the CVE-2008-2436 vulnerability.