CVE-2008-5231

2022-10-0316:13:54

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-5231

novell iprint

buffer overflow

remote code execution

activex

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.471

Percentile

97.5%

JSON

Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431.

Affected configurations

NVD

Node

novelliprintRange≤5.04

novelliprintMatch4.26

novelliprintMatch4.27

novelliprintMatch4.28

novelliprintMatch4.30

novelliprintMatch4.32

novelliprintMatch4.34

novelliprintMatch4.36

novelliprintMatch4.38

VendorProductVersionCPE
novelliprint4.30cpe:/a:novell:iprint:4.30:::
novelliprint4.27cpe:/a:novell:iprint:4.27:::
novelliprint4.36cpe:/a:novell:iprint:4.36:::
novelliprint4.26cpe:/a:novell:iprint:4.26:::
novelliprint4.28cpe:/a:novell:iprint:4.28:::
novelliprintcpe:/a:novell:iprint::::
novelliprint4.38cpe:/a:novell:iprint:4.38:::
novelliprint4.34cpe:/a:novell:iprint:4.34:::
novelliprint4.32cpe:/a:novell:iprint:4.32:::

Vendor	Product	Version	CPE
novell	iprint	4.30	cpe:/a:novell:iprint:4.30:::
novell	iprint	4.27	cpe:/a:novell:iprint:4.27:::
novell	iprint	4.36	cpe:/a:novell:iprint:4.36:::
novell	iprint	4.26	cpe:/a:novell:iprint:4.26:::
novell	iprint	4.28	cpe:/a:novell:iprint:4.28:::
novell	iprint		cpe:/a:novell:iprint::::
novell	iprint	4.38	cpe:/a:novell:iprint:4.38:::
novell	iprint	4.34	cpe:/a:novell:iprint:4.34:::
novell	iprint	4.32	cpe:/a:novell:iprint:4.32:::