CVE-2010-1527

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 36%

from disclosure to weapon27 days

Published on NVDAug 23

1st PoC+27d

metasploitAug 20

exploitation probability

36%top 2% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/15072unverified exploitdbwww.exploit-db.com/exploits/15042unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/40805 http://secunia.com/secunia_research/2010-104/https://exchange.xforce.ibmcloud.com/vulnerabilities/61220 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973 http://www.novell.com/support/viewContent.do?externalId=7006679 http://www.securityfocus.com/bid/42576