CVE-2011-1705

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-09 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.

Affected products

Novell iPrint webrowser ActiveX plugin: through 5.60; 4.26, 4.27, 4.28, 4.30, 4.32, 4.34 (+13)

References

http://download.novell.com/Download?buildid=6_bNby38ERg~
http://secunia.com/advisories/44811
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008729
http://www.securityfocus.com/archive/1/518272/100/0/threaded
http://www.securityfocus.com/bid/48124
http://www.securitytracker.com/id?1025606
http://zerodayinitiative.com/advisories/ZDI-11-178/
https://exchange.xforce.ibmcloud.com/vulnerabilities/67880
http://download.novell.com/Download?buildid=6_bNby38ERg~
http://secunia.com/advisories/44811
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7008729
http://www.securityfocus.com/archive/1/518272/100/0/threaded

Get alerted when CVE-2011-1705 or the next vulnerability affects your stack