Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2011-1707

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Novell iPrint打印解决方案允许用户向网络打印机发送文档。 Novell iPrint Client中存在远程代码执行漏洞。该漏洞位于由ActiveX和Netscape兼容浏览器插件使用的nipplib组件中，当处理来自用户指定的printer-url的op-printer-list-all-jobs参数时，该程序盲目地复制用户提供的数据到基于栈的固定长度缓冲区中。远程攻击者可利用此漏洞在浏览器上下文中执行任意代码。

AI Predicted 9.8 Difficulty: Easy EPSS 4.88% · P92

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2011-1707

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Novell iPrint Client op-printer-list-all-jobs url远程代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Novell iPrint打印解决方案允许用户向网络打印机发送文档。 Novell iPrint Client中存在远程代码执行漏洞。该漏洞位于由ActiveX和Netscape兼容浏览器插件使用的nipplib组件中，当处理来自用户指定的printer-url的op-printer-list-all-jobs参数时，该程序盲目地复制用户提供的数据到基于栈的固定长度缓冲区中。远程攻击者可利用此漏洞在浏览器上下文中执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2011-1707

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1707

请登录查看更多情报信息。

Vendor Advisories for CVE-2011-1707 (6)

Other References for CVE-2011-1707 (1)

Same Patch Batch · n/a · 2011-06-09 · 32 CVEs total

CVE-2011-1808 Google Chrome浮点处理释放后使用漏洞
CVE-2011-1823 Android vold volume管理器守护程序内存破坏漏洞
CVE-2010-4804 Android浏览器信息泄露漏洞
CVE-2011-2342 Google Chrome DOM实现同源策略绕过漏洞
CVE-2011-2332 Google Chrome同源策略绕过漏洞
CVE-2011-1819 Google Chrome扩展注入漏洞
CVE-2011-1818 Google Chrome图片加载器释放后使用漏洞
CVE-2011-1817 Google Chrome内存破坏漏洞
CVE-2011-1816 Google Chrome developer工具释放后使用漏洞
CVE-2011-1815 Google Chrome代码注入漏洞
CVE-2011-1814 Google Chrome拒绝服务漏洞
CVE-2011-1813 Google Chrome框架扩展无效指针漏洞
CVE-2011-1812 Google Chrome访问限制绕过漏洞
CVE-2011-1811 Google Chrome拒绝服务漏洞
CVE-2011-1810 Google Chrome CSS历史信息泄露漏洞
CVE-2011-1809 Google Chrome辅助功能释放后使用漏洞
CVE-2011-1708 Novell iPrint Client nipplib.dll op-printer-list-all-jobs cookie栈缓冲区溢出漏洞
CVE-2011-1760 OProfile utils/opcontrol 'set_event()'本地权限提升漏洞
CVE-2011-1706 Novell iPrint Client nipplib.dll iprint-client-config-info栈缓冲区溢出漏洞
CVE-2011-1705 Novell iPrint Client nipplib.dll client-file-name堆缓冲区溢出漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1707

No comments yet

Leave a comment