TITLE: Novell iPrint Client Date/Time Parsing Buffer Overflow SECUNIA ADVISORY ID: SA35004 VERIFY ADVISORY: http://secunia.com/advisories/35004/ DESCRIPTION: Secunia Research has discovered a vulnerability in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when processing certain time information and can be exploited to cause a stack-based buffer overflow by passing a specially crafted string to certain parameters or methods. Successful exploitation allows execution of arbitrary code when a user e.g. views a malicious web page. The vulnerability is confirmed in version 4.38. Other versions may also be affected. SOLUTION: No fix is available for the 4.x branch, but users can upgrade to version 5.32. PROVIDED AND/OR DISCOVERED BY: Carsten Eiram, Secunia Research. ORIGINAL ADVISORY: Secunia Research: http://secunia.com/secunia_research/2009-44/ Novell: http://download.novell.com/Download?buildid=29T3EFRky18~ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ----------------------------------------------------------------------

What's Related http://secunia.com/advi... http://secunia.com/secu... http://download.novell.... http://secunia.com/advi... http://secunia.com/advi... More by kkbass More from Security

Story Options Mail Story to a Friend Printable Story Format

Trackback

Trackback URL for this entry: http://www.abend.org/trackback.php/20091208210031526

Novell News Summary – Part III: AutoZone-SCO Case Ends, Financial Leftovers, Partner Academy Launched in India | Boyco
Tracked on Saturday, December 12 2009 @ 08:01 AM CST

[SA35004] Novell iPrint Client Date/Time Parsing Buffer Overflow | 0 comments | Create New Account

Newest First Oldest First Flat Nested No Comments Threaded

The following comments are owned by whomever posted them. This site is not responsible for what they say.