Back to CVE Browser

CVE-2007-2954

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile29.70th

PublishedAug 31, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.

Affected Platforms (CPE)

📦

Novell

Client

= 4.91

📦

Novell

Client

= 4.91

📦

Novell

Client

= 4.91

References & Advisories

🔗 http://download.novell.com/Download?buildid=VOXNZb-6t_g~

🔗 http://osvdb.org/37321

🔗 http://secunia.com/advisories/26374

🔗 http://secunia.com/secunia_research/2007-57/advisory/

🔗 http://securitytracker.com/id?1018623

🔗 http://www.securityfocus.com/bid/25474

🔗 http://www.vupen.com/english/advisories/2007/3006

🔗 http://www.zerodayinitiative.com/advisories/ZDI-07-045/

Related Vulnerabilities

CVE-2020-2949110.0

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker...

CVE-2019-1665010.0

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same ...

CVE-2026-4638910.0

UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Ident...

CVE-2020-738810.0

Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authenticati...