← back
CVE-2007-2954

CVE-2007-2954

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 23%
exploitation probability
23%top 2% of all CVEs
observed exploitation
nono source reports it
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.
Affected products
n/a · n/a
References
http://download.novell.com/Download?buildid=VOXNZb-6t_g~http://osvdb.org/37321http://secunia.com/advisories/26374http://secunia.com/secunia_research/2007-57/advisory/http://securitytracker.com/id?1018623https://exchange.xforce.ibmcloud.com/vulnerabilities/35824http://www.securityfocus.com/bid/25474http://www.vupen.com/english/advisories/2007/3006http://www.zerodayinitiative.com/advisories/ZDI-07-045/