CVE-2009-1569

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://download.novell.com/Download?buildid=29T3EFRky18~Patch
http://secunia.com/advisories/35004Vendor Advisory
http://secunia.com/advisories/37169Vendor Advisory
http://secunia.com/secunia_research/2009-44/Vendor Advisory
http://www.securityfocus.com/archive/1/508288/100/0/threaded
http://www.securityfocus.com/bid/37242Patch
http://www.vupen.com/english/advisories/2009/3429Patch, Vendor Advisory
http://download.novell.com/Download?buildid=29T3EFRky18~Patch
http://secunia.com/advisories/35004Vendor Advisory
http://secunia.com/advisories/37169Vendor Advisory
http://secunia.com/secunia_research/2009-44/Vendor Advisory
http://www.securityfocus.com/archive/1/508288/100/0/threaded
http://www.securityfocus.com/bid/37242Patch
http://www.vupen.com/english/advisories/2009/3429Patch, Vendor Advisory

Timeline

Published: Dec 8, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-15709.3Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary c CVE-2009-157110.0Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and CVE-2009-15725.0The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing A CVE-2009-15734.6xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command CVE-2009-15745.0racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets CVE-2009-15754.3Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote att CVE-2009-15764.3Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote atta CVE-2009-15779.3Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to exec CVE-2009-15784.3Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject ar CVE-2009-15796.8The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to exec CVE-2009-15805.8Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.CVE-2009-15814.3functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in