Security Vulnerability - iPrint Activex GetDriverSettings Remote Code Execution Vulnerability

  • Document ID:7007234
  • Creation Date:18-Nov-2010
  • Modified Date:01-Aug-2012
    • Micro Focus Products:
      iPrint

Environment

Novell iPrint Client for Windows 5.52

Situation

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Resolution

The fix for this security vulnerability is included in the released "iPrint Client for Windows XP/Vista/Win 7 5.56" patch, available at https://download.novell.com/Download?buildid=JV7fd0tFHHM~ or later.

Status

Security Alert

Additional Information

ZDI-CAN-959: "iPrint Activex GetDriverSettings Remote Code Execution Vulnerability." This vulnerability was found by Anonymous, TippingPoint DVLabs. CVE-2010-4321.