Novell.Client.Call-back-url.Parameter.Overflow

Release Date Nov 09, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a buffer-overflow vulnerability in Novell iPrint Client. The vulnerability is caused by an error when the vulnerable software handles malformed parameter value. It allows a remote attacker to execute arbitrary code. It may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control.
Affected Products Novell iPrint Client version 5.30 Novell iPrint Client version 5.42
Recommended Actions Refer to the vendor's web site for the suggested workaround. http://www.novell.com/support/viewContent.do?externalId=7006679
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-1527
Reference/s http://www.exploit-db.com/exploits/15072 http://www.exploit-db.com/exploits/15042 http://www.exploit-db.com/exploits/15072/ http://www.securityfocus.com/bid/42576 (BugTraq)

Fortinet