The host is installed with Novell iPrint Client and is prone to multiple vulnerabilities.

Successful exploitation could allow attackers to execute arbitrary code, to cause buffer overflow or cause the application to crash. Impact Level: Application

Upgrade to Novell iPrint Client version 5.44 or later http://www.novell.com/products/openenterpriseserver/iprint.html

Multiple flaws are due to: - An error in 'PluginGetDriverFile' function, which interprets an uninitialized memory location as a pointer value. - An improper bounds checking by the 'call-back-url' parameter for a 'op-client-interface-version' operation. A remote attacker can use an overly long call-back-url parameter to overflow a buffer and execute arbitrary code on the system.

Novell iPrint Client version prior to 5.44 on Windows

• http://secunia.com/advisories/40805
• http://secunia.com/secunia_research/2010-104/
• http://www.novell.com/support/viewContent.do?externalId=7006679
• http://xforce.iss.net/xforce/xfdb/61220

---

Updated on 2015-03-25