CVE-2007-2954

Currently unrated

Key Information:

Vendor
Novell
Status
Client
Vendor
CVE Published:
31 August 2007

Summary

Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.

References

http://www.vupen.com/english/advisories/2007/3006
vdb-entryx_refsource_VUPEN
http://download.novell.com/Download?buildid=VOXNZb-6t_g~
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/35824
vdb-entryx_refsource_XF

EPSS Score

67% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.