CVE-2011-4185: Buffer Overflow

Q: What is the severity of CVE-2011-4185?

CVE-2011-4185 has a critical severity rating due to its ability to allow remote code execution or cause denial of service.

Q: How do I fix CVE-2011-4185?

To fix CVE-2011-4185, update the Novell iPrint Client to version 5.78 or later.

Q: What software is affected by CVE-2011-4185?

CVE-2011-4185 affects Novell iPrint Client versions up to and including 5.74, as well as earlier versions like 4.26 to 5.72.

Q: What type of vulnerability is CVE-2011-4185?

CVE-2011-4185 is a remote code execution vulnerability found in the GetPrinterURLList2 method of the ActiveX control.

Q: Can CVE-2011-4185 cause system instability?

Yes, CVE-2011-4185 can cause memory corruption leading to denial of service and potential system instability.

Published Feb 20, 2012

Updated

The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436.

Affected Software

25 affected components

Novell iPrint<=5.74

Novell iPrint=4.26

Novell iPrint=4.27

Novell iPrint=4.28

Novell iPrint=4.30

Novell iPrint=4.32

Novell iPrint=4.34

Novell iPrint=4.36

Novell iPrint=4.38

Novell iPrint=5.04

Novell iPrint=5.12

Novell iPrint=5.20b

Novell iPrint=5.30

Novell iPrint=5.32

Novell iPrint=5.40

Novell iPrint=5.42

Novell iPrint=5.44

Novell iPrint=5.50

Novell iPrint=5.52

Novell iPrint=5.56

Novell iPrint=5.60

Novell iPrint=5.64

Novell iPrint=5.68

Novell iPrint=5.72

Microsoft Windows

Event History

Feb 20, 2012

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Feb 21, 2012

Data Sourced

01:31 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-4185?

CVE-2011-4185 has a critical severity rating due to its ability to allow remote code execution or cause denial of service.

How do I fix CVE-2011-4185?

To fix CVE-2011-4185, update the Novell iPrint Client to version 5.78 or later.

What software is affected by CVE-2011-4185?

CVE-2011-4185 affects Novell iPrint Client versions up to and including 5.74, as well as earlier versions like 4.26 to 5.72.

What type of vulnerability is CVE-2011-4185?

CVE-2011-4185 is a remote code execution vulnerability found in the GetPrinterURLList2 method of the ActiveX control.

Can CVE-2011-4185 cause system instability?