CVE-2007-2954

CRITICO 10.0CVE-2007-2954 · Published 31/08/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
client novell	`= 4.91`	No fix yet

Description

Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.

References

download.novell.com/Download · Patch
osvdb.org/37321
secunia.com/advisories/26374 · Patch
secunia.com/secunia_research/2007-57/advisory · Patch
securitytracker.com/id · Patch
securityfocus.com/bid/25474 · Patch
vupen.com/english/advisories/2007/3006 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-07-045
exchange.xforce.ibmcloud.com/vulnerabilities/35824

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free