CVE-2010-4321

Name of the Vulnerable Software and Affected Versions Novell iPrint Client version 5.52

Description The issue is related to a stack-based buffer overflow in an ActiveX control. This occurs when a long argument is passed to the GetDriverSettings2 method, which can also be reached through the GetDriverSettings method. This allows remote attackers to execute arbitrary code.

Recommendations For Novell iPrint Client version 5.52, consider disabling the GetDriverSettings2 and GetDriverSettings methods as a temporary workaround until a patch is available. Restrict access to the ienipp.ocx ActiveX control to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.