CVE-2010-3106

CVE-2010-3106 describes a critical buffer overflow vulnerability in the Novell iPrint Client's ienipp.ocx ActiveX control, affecting versions prior to 5.42. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by manipulating the 'debug' parameter of the ExecuteRequest method with a specially crafted length. With a CVSS score of 9.3 (Critical), the vulnerability is easily exploitable over the network with medium attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation, despite limited community discussion or media coverage.