CVE-2010-3107 - CVE House
Back to Database
Status published High CVE-2010-3107

A certain ActiveX control in ienipp.ocx in the browser plugin...

Vulnerability Description

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3107

Credits & Attribution

No credits recorded in the NVD database.

References

More from novell

View All →
CVE-2016-7052
crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a...
High 7.5
CVE-2016-5762
Integer overflow in the Post Office Agent in Novell GroupWise...
Critical 9.8
CVE-2016-5761
Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2...
Medium 6.1
CVE-2016-5760
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in...
Medium 6.1
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory...
High 7.8

Affected Vendor

Affected Software

iprint
Vulnerable Versions:
0, 4.26, 4.27, 4.28, 4.30, 4.32, 4.34, 4.36, 4.38, 5.04, 5.12, 5.20b, 5.30, 5.32

Timeline

Official Publish: August 23rd, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.