Two vulnerabilities have been reported in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the handling of the "call-back-url" parameter value for a "op-client-interface-version" operation where the "result-type" parameter is set to "url" can be exploited to cause a stack-based buffer overflow via an overly long "call-back-url" parameter value.

2) An error in the handling of the "GetDriverFile()" method can be exploited to use data in uninitialised memory as a pointer.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

Solution
Update to version 5.44.
Further details available in Customer Area

Provided and/or discovered by
1) Carsten Eiram, Secunia Research.
2) Aaron Portnoy, TippingPoint DVLabs.

Changelog
Further details available in Customer Area

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2010-104/

Novell:
http://www.novell.com/support/viewContent.do?externalId=7006679
http://www.novell.com/support/viewContent.do?externalId=7008401

TippingPoint DVLabs:
http://dvlabs.tippingpoint.com/advisory/TPTI-10-08

Technical Analysis
Further details available in Customer Area

Deep Links
Links available in Customer Area