CVE-2011-4186

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.78

Description The issue is related to a heap-based buffer overflow in the nipplib.dll component. This can be exploited by remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.

Recommendations For versions prior to 5.78, update to version 5.78 or later to resolve the issue. As a temporary workaround, consider restricting access to the nipplib.dll component to minimize the risk of exploitation. Avoid using the client-file-name parameter in the affected API endpoint until the issue is resolved.