CVE-2007-2954 Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments...
HighCVSS 10.0
EPSS 23.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell client | = 4.91-sp2 | No fix listed |
| novell client | = 4.91-sp3 | No fix listed |
| novell client | = 4.91-sp4 | No fix listed |
References
- download.novell.com patch
- 37321 vdb-entry
- 26374 patch third-party-advisory vendor-advisory
- secunia.com patch vendor-advisory
- 1018623 patch vdb-entry
- 25474 patch vdb-entry
- ADV-2007-3006 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- novell-client-nwspool-bo(35824) vdb-entry