CVE-2008-0639 Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via....
HighCVSS 10.0
EPSS 23.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell client | = 4.91-sp2 | No fix listed |
| novell client | = 4.91-sp3 | No fix listed |
| novell client | = 4.91-sp4 | No fix listed |
References
- download.novell.com patch
- 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability mailing-list patch
- 28895 patch third-party-advisory vendor-advisory
- support.novell.com
- 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability mailing-list
- 27741 patch vdb-entry
- 1019366 vdb-entry
- ADV-2008-0496 vdb-entry
- www.zerodayinitiative.com patch