CVE-2008-2908: Buffer Overflow

Q: What is the severity of CVE-2008-2908?

CVE-2008-2908 is classified as high severity due to its potential for remote code execution.

Q: How do I fix CVE-2008-2908?

To fix CVE-2008-2908, upgrade to Novell iPrint Client version 4.36 or later.

Q: What systems are affected by CVE-2008-2908?

CVE-2008-2908 affects all versions of Novell iPrint Client for Windows prior to version 4.36.

Q: What types of attacks can exploit CVE-2008-2908?

CVE-2008-2908 can be exploited through remote attacks that send specially crafted parameters to the vulnerable ActiveX control.

Q: Is user interaction required to exploit CVE-2008-2908?

Exploitation of CVE-2008-2908 typically requires user interaction, such as visiting a malicious webpage.

Published Jun 30, 2008

Updated

Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter. NOTE: some of these details are obtained from third party information.

Affected Software

1 affected component

Novell iPrint Client<=4.35

Event History

Jun 30, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2908?

CVE-2008-2908 is classified as high severity due to its potential for remote code execution.

How do I fix CVE-2008-2908?

To fix CVE-2008-2908, upgrade to Novell iPrint Client version 4.36 or later.

What systems are affected by CVE-2008-2908?

CVE-2008-2908 affects all versions of Novell iPrint Client for Windows prior to version 4.36.

What types of attacks can exploit CVE-2008-2908?

CVE-2008-2908 can be exploited through remote attacks that send specially crafted parameters to the vulnerable ActiveX control.

Is user interaction required to exploit CVE-2008-2908?