Novell iPrint Client ActiveX Control Stack Buffer Overflow
Severity: CRITICAL
CVE Identifier: CVE-2008-2908
Advisory Date: JUL 21, 2015
DESCRIPTION
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter. NOTE: some of these details are obtained from third party information.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1002592
Trend Micro Deep Security DPI Rule Name: 1002592 - Novell iPrint Client ActiveX Control Stack Buffer Overflow
AFFECTED SOFTWARE AND VERSION
- novell iprint_client 4.35