CVE-2010-1527

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-08-23 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.

Affected products

Novell iPrint webrowser ActiveX plugin: through 5.42; 4.26, 4.27, 4.28, 4.30, 4.32, 4.34 (+8)

References

http://secunia.com/advisories/40805
http://secunia.com/secunia_research/2010-104/
http://www.novell.com/support/viewContent.do?externalId=7006679
http://www.securityfocus.com/bid/42576
https://exchange.xforce.ibmcloud.com/vulnerabilities/61220
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973
http://secunia.com/advisories/40805
http://secunia.com/secunia_research/2010-104/
http://www.novell.com/support/viewContent.do?externalId=7006679
http://www.securityfocus.com/bid/42576
https://exchange.xforce.ibmcloud.com/vulnerabilities/61220
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973

Get alerted when CVE-2010-1527 or the next vulnerability affects your stack