Lucene search

K
cve[email protected]CVE-2011-4185
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4185

2022-10-0316:15:14
CWE-119
web.nvd.nist.gov
32
cve-2011-4185
novell
iprint client
activex
remote code execution
windows
memory corruption
cve-2008-2431
cve-2008-2436

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.471 Medium

EPSS

Percentile

97.5%

The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436.

Affected configurations

NVD
Node
novelliprintRange5.74
OR
novelliprintMatch4.26
OR
novelliprintMatch4.27
OR
novelliprintMatch4.28
OR
novelliprintMatch4.30
OR
novelliprintMatch4.32
OR
novelliprintMatch4.34
OR
novelliprintMatch4.36
OR
novelliprintMatch4.38
OR
novelliprintMatch5.04
OR
novelliprintMatch5.12
OR
novelliprintMatch5.20b
OR
novelliprintMatch5.30
OR
novelliprintMatch5.32
OR
novelliprintMatch5.40
OR
novelliprintMatch5.42
OR
novelliprintMatch5.44
OR
novelliprintMatch5.50
OR
novelliprintMatch5.52
OR
novelliprintMatch5.56
OR
novelliprintMatch5.60
OR
novelliprintMatch5.64
OR
novelliprintMatch5.68
OR
novelliprintMatch5.72
AND
microsoftwindows

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.471 Medium

EPSS

Percentile

97.5%