Secunia Research has discovered two vulnerabilities in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the handling of the "target-frame" parameter can be exploited to cause a stack-based buffer overflow via an overly long parameter value.

2) A boundary error when processing certain time information can be exploited to cause a stack-based buffer overflow by passing a specially crafted string to certain parameters or methods.

Successful exploitation of the vulnerabilities allows execution of arbitrary code when a user e.g. visits a malicious website.

The vulnerabilities are confirmed in version 5.30. Other versions may also be affected.

Solution
Update to version 5.32.
Further details available in Customer Area

Provided and/or discovered by
Carsten Eiram, Secunia Research.

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2009-40/
http://secunia.com/secunia_research/2009-44/

Deep Links
Links available in Customer Area