CVE-2008-5231

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-26 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431.

Affected products

Novell iPrint webrowser ActiveX plugin: through 5.04; 4.26, 4.27, 4.28, 4.30, 4.32, 4.34 (+2)

References

http://secunia.com/advisories/30667
http://secunia.com/secunia_research/2008-27/advisory/
http://www.securityfocus.com/bid/30813
http://secunia.com/advisories/30667
http://secunia.com/secunia_research/2008-27/advisory/
http://www.securityfocus.com/bid/30813

Get alerted when CVE-2008-5231 or the next vulnerability affects your stack