« Volver al listado

CVE-2010-3108

Estado: ModificadaAlta (9.3)—

Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Novell — Iprint

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-3108",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-08-23T22:00:03.547",
  "references": [
    {
      "url": "http://download.novell.com/Download?buildid=ftwZBxEFjIg~",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-139/",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://download.novell.com/Download?buildid=ftwZBxEFjIg~",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-139/",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de búfer en el plugin para el navegador en Novell iPrint Client antes de v5.42 permite a atacantes remotos ejecutar código arbitrario mediante el uso de elementos EMBED para pasar parámetros con nombres largos."
    }
  ],
  "lastModified": "2026-06-16T23:22:08.480",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "583C6EB4-A372-4B15-8B3A-09A0D778ECA3",
              "versionEndIncluding": "5.40"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9AD9057-2218-481E-96CB-BF568AD3A9F2"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D044326-00CB-4158-A652-7D7FBDB380C7"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB01661-76E1-4181-A798-6325EFD681FE"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16769BC0-66AE-4AA3-B504-03389717A56D"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCCA90D8-A320-43B0-A667-DAFC0D00924F"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:5.04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F12CAA5-6C37-4FBA-BA41-03C7F81AE6BE"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:5.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCA3CFFD-8D4B-4BEC-934A-7E5D18F87807"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:5.20b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2A31E77-BFE6-4F54-9839-8323F8E4995E"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:5.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E8EC466-1CA2-4D8E-8D3F-F1246DC1850B"
            },
            {
              "criteria": "cpe:2.3:a:novell:iprint:5.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27533465-909A-4300-A713-36924FB330CA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}