CVE-2008-2436: Novell Iprint Client

High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx.

Affected products

• Novell Iprint Client: version 4.26 only; version 4.32 only; version 4.35 only; version 4.36 only; version 5.06 only

Published 2008-09-05. Last modified 2026-06-16.