Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow

  Severity: CRITICAL
  CVE Identifier: CVE-2009-1568
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003907
  Trend Micro Deep Security DPI Rule Name: 1003907 - Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow

  AFFECTED SOFTWARE AND VERSION

  • novell iprint_client 5.30
  • novell iprint_client 5.31