Show plain JSON{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5538B39-4C1E-42AE-9B93-6203C77A9C91", "versionEndIncluding": "5.04", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*", "matchCriteriaId": "3332CB43-D2ED-4720-8ED4-AE222C6F7FF3", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*", "matchCriteriaId": "E9AD9057-2218-481E-96CB-BF568AD3A9F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*", "matchCriteriaId": "0D044326-00CB-4158-A652-7D7FBDB380C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*", "matchCriteriaId": "3BDA0CD3-3E49-42E9-8D41-2B93FEE53610", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*", "matchCriteriaId": "AAB01661-76E1-4181-A798-6325EFD681FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*", "matchCriteriaId": "16769BC0-66AE-4AA3-B504-03389717A56D", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*", "matchCriteriaId": "25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*", "matchCriteriaId": "CCCA90D8-A320-43B0-A667-DAFC0D00924F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el m\u00e9todo ExecuteRequest en el control ActiveX Novell iPrint en ienipp.ocx en Novell iPrint Client 5.06 y versiones anteriores, permite a los atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un valor de opci\u00f3n largo 'target-frame'."}], "id": "CVE-2008-5231", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-11-26T01:30:00.420", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30667"}, {"source": "cve@mitre.org", "url": "http://secunia.com/secunia_research/2008-27/advisory/"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/30813"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30667"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/secunia_research/2008-27/advisory/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/30813"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}