CVE-2008-5231: Buffer Overflow
Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5231?
CVE-2008-5231 has been rated as high severity due to its potential to allow remote code execution.
How do I fix CVE-2008-5231?
To mitigate CVE-2008-5231, update to a version of the Novell iPrint Client later than 5.04 that is not affected.
What causes the vulnerability in CVE-2008-5231?
CVE-2008-5231 is caused by a stack-based buffer overflow in the ExecuteRequest method of the Novell iPrint ActiveX control.
Which software versions are affected by CVE-2008-5231?
Affected versions include Novell iPrint Client 5.06 and earlier, as well as specific versions from 4.26 to 4.38.
Can CVE-2008-5231 be exploited remotely?
Yes, CVE-2008-5231 can be exploited remotely by attackers through crafted target-frame option values.