CVE-2011-1700
critical
CVSS v3
โ
CVSS v4 NEW
โ
VIR risk
9.3
Description
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.
Predictions
Exploit likelihood
20%
Patch ETA
โ
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ if you've already worked around this in production โ publish your fix to the community-verified tier.
โ Propose a mitigation on Community โ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| novell | iprint | {"endIncluding":"5.60"} | |
| novell | iprint | 4.26 | |
| novell | iprint | 4.27 | |
| novell | iprint | 4.28 | |
| novell | iprint | 4.30 | |
| novell | iprint | 4.32 | |
| novell | iprint | 4.34 | |
| novell | iprint | 4.36 | |
| novell | iprint | 4.38 | |
| novell | iprint | 5.04 | |
| novell | iprint | 5.12 | |
| novell | iprint | 5.20b | |
| novell | iprint | 5.30 | |
| novell | iprint | 5.32 | |
| novell | iprint | 5.40 | |
| novell | iprint | 5.42 | |
| novell | iprint | 5.44 | |
| novell | iprint | 5.50 | |
| novell | iprint | 5.52 | |
| novell | iprint | 5.56 | |
References
- http://download.novell.com/Download?buildid=6_bNby38ERg~
- http://secunia.com/advisories/44811
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008722
- http://www.securityfocus.com/archive/1/518267/100/0/threaded
- http://www.securityfocus.com/bid/48124
- http://www.securitytracker.com/id?1025606
- http://zerodayinitiative.com/advisories/ZDI-11-173/
- http://download.novell.com/Download?buildid=6_bNby38ERg~
- http://secunia.com/advisories/44811
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008722
- http://www.securityfocus.com/archive/1/518267/100/0/threaded
- http://www.securityfocus.com/bid/48124
- http://www.securitytracker.com/id?1025606
- http://zerodayinitiative.com/advisories/ZDI-11-173/
CWEs
CWE-119
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.