CVE-2010-3106: Input Validation
The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3106?
CVE-2010-3106 has a high severity rating due to its potential to allow remote code execution or denial of service.
Which versions of Novell iPrint are affected by CVE-2010-3106?
CVE-2010-3106 affects various versions of Novell iPrint including 4.26, 4.27, 4.28, 4.30, 4.32, 4.34, 4.36, 4.38, 5.04, 5.12, 5.20b, 5.30, 5.32, and 5.40.
How do I fix CVE-2010-3106?
To fix CVE-2010-3106, you should upgrade to Novell iPrint Client version 5.42 or later.
What types of attacks can exploit CVE-2010-3106?
CVE-2010-3106 can be exploited to execute arbitrary code or cause stack memory corruption leading to denial of service.
Is there a workaround for CVE-2010-3106 if I cannot update?
There are no well-documented workarounds for CVE-2010-3106, so updating to a secure version is the recommended approach.