What is the severity of CVE-2008-2436?

CVE-2008-2436 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2008-2436?

To mitigate CVE-2008-2436, upgrade the Novell iPrint Client to version 4.38 or later for 4.x series and version 5.08 or later for 5.x series.

What software is affected by CVE-2008-2436?

CVE-2008-2436 affects Novell iPrint Client versions 4.26, 4.32, 4.35, 4.36, and 5.06.

What types of attacks can be executed due to CVE-2008-2436?

Due to CVE-2008-2436, attackers can exploit heap-based buffer overflows to execute arbitrary code.

What functions are involved in CVE-2008-2436?

The functions GetPrinterURLList, GetPrinterURLList2, and GetFileList2 are involved in the CVE-2008-2436 vulnerability.

Vulnerability/
CVE-2008-2436

critical

9.3

CWE

94 119

5/9/2008

7/8/2024

CVE-2008-2436: Code Injection

First published: Fri Sep 05 2008(Updated: )

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

Credit: PSIRT-CNA@flexerasoftware.com

Affected Software	Affected Version	How to fix
Novell iPrint Client	=4.35
Novell iPrint Client	=4.32
Novell iPrint Client	=5.06
Novell iPrint Client	=4.26
Novell iPrint Client	=4.36

Remedy

http://secunia.com/advisories/31370

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-2436?
CVE-2008-2436 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-2436?
To mitigate CVE-2008-2436, upgrade the Novell iPrint Client to version 4.38 or later for 4.x series and version 5.08 or later for 5.x series.
What software is affected by CVE-2008-2436?
CVE-2008-2436 affects Novell iPrint Client versions 4.26, 4.32, 4.35, 4.36, and 5.06.
What types of attacks can be executed due to CVE-2008-2436?
Due to CVE-2008-2436, attackers can exploit heap-based buffer overflows to execute arbitrary code.
What functions are involved in CVE-2008-2436?
The functions GetPrinterURLList, GetPrinterURLList2, and GetFileList2 are involved in the CVE-2008-2436 vulnerability.

collector/nvd-historical
collector/nvd-index
agent/weakness
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/author
agent/severity
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/novell
canonical/novell iprint client
version/novell iprint client/4.35
version/novell iprint client/4.32
version/novell iprint client/5.06
version/novell iprint client/4.26
version/novell iprint client/4.36

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2008-2436?
CVE-2008-2436 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-2436?
To mitigate CVE-2008-2436, upgrade the Novell iPrint Client to version 4.38 or later for 4.x series and version 5.08 or later for 5.x series.
What software is affected by CVE-2008-2436?
CVE-2008-2436 affects Novell iPrint Client versions 4.26, 4.32, 4.35, 4.36, and 5.06.
What types of attacks can be executed due to CVE-2008-2436?
Due to CVE-2008-2436, attackers can exploit heap-based buffer overflows to execute arbitrary code.
What functions are involved in CVE-2008-2436?
The functions GetPrinterURLList, GetPrinterURLList2, and GetFileList2 are involved in the CVE-2008-2436 vulnerability.