VULNERABILITY INTELLIGENCE

CVE-2008-2436

CVSS score9.3 HIGH
EPSS probability4.88%
CISA KEVNot currently listed
Published2008-09-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references