CVE-2008-2436

Name of the Vulnerable Software and Affected Versions: Novell iPrint Client versions 4.x before 4.38 Novell iPrint Client versions 5.x before 5.08

Description: The issue is related to multiple heap-based buffer overflows in the IppCreateServerRef function. This can be exploited by remote attackers to execute arbitrary code via a long argument to certain functions in the Novell iPrint ActiveX control. The affected functions include GetPrinterURLList, GetPrinterURLList2, and GetFileList2.

Recommendations: For Novell iPrint Client versions 4.x before 4.38, update to version 4.38 or later. For Novell iPrint Client versions 5.x before 5.08, update to version 5.08 or later.