CVE-2011-4186: Buffer Overflow

Q: What is the severity of CVE-2011-4186?

CVE-2011-4186 is categorized as a high-severity vulnerability due to its potential for remote code execution.

Q: How do I fix CVE-2011-4186?

To mitigate CVE-2011-4186, users should upgrade the Novell iPrint Client to version 5.78 or later.

Q: What versions of Novell iPrint are affected by CVE-2011-4186?

CVE-2011-4186 affects Novell iPrint Client versions prior to 5.78, including versions from 4.26 up to 5.74.

Q: Can CVE-2011-4186 be exploited remotely?

Yes, CVE-2011-4186 can be exploited remotely by attackers through a crafted client-file-name parameter in a printer URL.

Q: Is CVE-2011-4186 specific to any particular operating system?

CVE-2011-4186 specifically affects the Novell iPrint Client on Microsoft Windows systems.

Published Feb 20, 2012

Updated

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerability than CVE-2011-1705.

Affected Software

25 affected components

Novell iPrint<=5.74

Novell iPrint=4.26

Novell iPrint=4.27

Novell iPrint=4.28

Novell iPrint=4.30

Novell iPrint=4.32

Novell iPrint=4.34

Novell iPrint=4.36

Novell iPrint=4.38

Novell iPrint=5.04

Novell iPrint=5.12

Novell iPrint=5.20b

Novell iPrint=5.30

Novell iPrint=5.32

Novell iPrint=5.40

Novell iPrint=5.42

Novell iPrint=5.44

Novell iPrint=5.50

Novell iPrint=5.52

Novell iPrint=5.56

Novell iPrint=5.60

Novell iPrint=5.64

Novell iPrint=5.68

Novell iPrint=5.72

Microsoft Windows

Event History

Feb 20, 2012

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Feb 21, 2012

Data Sourced

01:31 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-4186?

CVE-2011-4186 is categorized as a high-severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2011-4186?

To mitigate CVE-2011-4186, users should upgrade the Novell iPrint Client to version 5.78 or later.

What versions of Novell iPrint are affected by CVE-2011-4186?

CVE-2011-4186 affects Novell iPrint Client versions prior to 5.78, including versions from 4.26 up to 5.74.

Can CVE-2011-4186 be exploited remotely?

Yes, CVE-2011-4186 can be exploited remotely by attackers through a crafted client-file-name parameter in a printer URL.

Is CVE-2011-4186 specific to any particular operating system?