VulnerabilityModified

CVE-2007-2954

HIGH 10.0EPSS 23.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 23.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 23.19% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: novell/client
Source: PSIRT-CNA@flexerasoftware.com

References

http://download.novell.com/Download?buildid=VOXNZb-6t_g~Patch
http://osvdb.org/37321
http://secunia.com/advisories/26374Patch, Vendor Advisory
http://secunia.com/secunia_research/2007-57/advisory/Patch, Vendor Advisory
http://securitytracker.com/id?1018623Patch
http://www.securityfocus.com/bid/25474Patch
http://www.vupen.com/english/advisories/2007/3006Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-045/
https://exchange.xforce.ibmcloud.com/vulnerabilities/35824
http://download.novell.com/Download?buildid=VOXNZb-6t_g~Patch
http://osvdb.org/37321
http://secunia.com/advisories/26374Patch, Vendor Advisory
http://secunia.com/secunia_research/2007-57/advisory/Patch, Vendor Advisory
http://securitytracker.com/id?1018623Patch
http://www.securityfocus.com/bid/25474Patch
http://www.vupen.com/english/advisories/2007/3006Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-045/
https://exchange.xforce.ibmcloud.com/vulnerabilities/35824

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.