Multiple vulnerabilities have been reported in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in nipplib.dll when handling the "uri" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

2) A boundary error in nipplib.dll when handling the "profile-time" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

3) A boundary error in nipplib.dll when handling the "profile-name" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

4) A boundary error in nipplib.dll when handling the "file-date-time" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

5) A boundary error in nipplib.dll when handling the "driver-version" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

6) A boundary error in nipplib.dll when handling the "core-package" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

7) A boundary error in nipplib.dll when handling the "client-file-name" parameter via "printer-url" can be exploited to cause a heap-based buffer overflow.

8) A boundary error in nipplib.dll when handling the "iprint-client-config-info" parameter via "printer-url" can be exploited to cause a stack-based buffer overflow.

9) A boundary error in nipplib.dll when handling the "op-printer-list-all-jobs" parameter via "printer-url" can be exploited to cause a stack-based buffer overflow.

10) A boundary error in nipplib.dll when handling a cookie associated with the "op-printer-list-all-jobs" parameter via "printer-url" can be exploited to cause a stack-based buffer overflow.

Successful exploitation of these vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 5.64.

Solution
Update to version 5.64.

Provided and/or discovered by
Ivan Rodriguez Almuina, via ZDI

Changelog
Further details available to Secunia VIM customers

Original Advisory
Novell:
http://www.novell.com/support/viewContent.do?externalId=7008708
http://www.novell.com/support/viewContent.do?externalId=7008720
http://www.novell.com/support/viewContent.do?externalId=7008722
http://www.novell.com/support/viewContent.do?externalId=7008723
http://www.novell.com/support/viewContent.do?externalId=7008724
http://www.novell.com/support/viewContent.do?externalId=7008726
http://www.novell.com/support/viewContent.do?externalId=7008727
http://www.novell.com/support/viewContent.do?externalId=7008728
http://www.novell.com/support/viewContent.do?externalId=7008729
http://www.novell.com/support/viewContent.do?externalId=7008730
http://www.novell.com/support/viewContent.do?externalId=7008731

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-172/
http://www.zerodayinitiative.com/advisories/ZDI-11-173/
http://www.zerodayinitiative.com/advisories/ZDI-11-174/
http://www.zerodayinitiative.com/advisories/ZDI-11-175/
http://www.zerodayinitiative.com/advisories/ZDI-11-176/
http://www.zerodayinitiative.com/advisories/ZDI-11-177/
http://www.zerodayinitiative.com/advisories/ZDI-11-178/
http://www.zerodayinitiative.com/advisories/ZDI-11-179/
http://www.zerodayinitiative.com/advisories/ZDI-11-180/
http://www.zerodayinitiative.com/advisories/ZDI-11-181/

Deep Links
Links available to Secunia VIM customers