First published: Mon Aug 23 2010(Updated: )
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Novell Iprint | <=5.40 | |
Novell Iprint | =4.26 | |
Novell Iprint | =4.27 | |
Novell Iprint | =4.28 | |
Novell Iprint | =4.30 | |
Novell Iprint | =4.32 | |
Novell Iprint | =4.34 | |
Novell Iprint | =4.36 | |
Novell Iprint | =4.38 | |
Novell Iprint | =5.04 | |
Novell Iprint | =5.12 | |
Novell Iprint | =5.20b | |
Novell Iprint | =5.30 | |
Novell Iprint | =5.32 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3108 is categorized as a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2010-3108, upgrade the Novell iPrint Client to version 5.42 or later.
CVE-2010-3108 affects Novell iPrint Client versions prior to 5.42.
Yes, CVE-2010-3108 can be exploited remotely via crafted EMBED elements.
Exploitation of CVE-2010-3108 may allow an attacker to execute arbitrary code on the affected system.