Lucene search

K
nvd[email protected]NVD:CVE-2008-0935
HistoryFeb 25, 2008 - 6:44 p.m.

CVE-2008-0935

2008-02-2518:44:00
CWE-119
web.nvd.nist.gov
9

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.438

Percentile

97.4%

Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to execute arbitrary code via a long argument to the ExecuteRequest method.

Affected configurations

Nvd
Node
novelliprintRange4.32
OR
novelliprint_clientMatch4.26
OR
novelliprint_clientMatch4.32
VendorProductVersionCPE
novelliprint*cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*
novelliprint_client4.26cpe:2.3:a:novell:iprint_client:4.26:*:*:*:*:*:*:*
novelliprint_client4.32cpe:2.3:a:novell:iprint_client:4.32:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.438

Percentile

97.4%