Novell iPrint nipplib.dll RCE Vulnerability (CVE-2011-1706)

Vulnerability Key Information Title: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability ID: - ZDI-11-179 - ZDI-CAN-1133 CVE ID: CVE-2011-1706 CVSS Score: 9.0, AV:N/AC:L/Au:N/C:P/I:P/A:C Affected Vendor: Novell Affected Product: iPrint Trend Micro Customer Protection: Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['11196']. Vulnerability Details: - This vulnerability allows remote attackers to execute arbitrary code on vulnerable Novell iPrint Client installations. User interaction is required to exploit this vulnerability; the target must access a malicious page or open a malicious file. - The vulnerability exists in the nipplib component used by ActiveX and Netscape-compatible browser plugins. When processing the user-specified printer-url via the iprint-client-config-info parameter, the process blindly copies user-supplied data into a fixed-length buffer on the stack. Remote attackers can exploit this vulnerability to execute arbitrary code within the browser context. Additional Details: - TID 7008730: Security Vulnerability - Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability - Link Disclosure Timeline: - 2011-03-31: Vulnerability reported to vendor - 2011-06-06: Coordinated public advisory release Credit: Ivan Rodriguez Almuina

Goal Reached Thanks to every supporter — we hit 100%!

Novell iPrint nipplib.dll RCE Vulnerability (CVE-2011-1706)