CVE-2010-3107
published 2010-08-23CVE-2010-3107: A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted…
PriorityP425high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.40%
69.3th percentile
A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | iprint | <= 5.40 | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://download.novell.com/Download?buildid=ftwZBxEFjIg~http://dvlabs.tippingpoint.com/advisory/TPTI-10-05https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12074http://download.novell.com/Download?buildid=ftwZBxEFjIg~http://dvlabs.tippingpoint.com/advisory/TPTI-10-05https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12074
2010-08-23
Published