CVE-2007-6701

critical

Description

Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35653

http://www.zerodayinitiative.com/advisories/ZDI-07-045.html

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html

http://securitytracker.com/id?1018471

http://secunia.com/advisories/26238

http://archives.neohapsis.com/archives/bugtraq/2007-08/0082.html

Details

Source: Mitre, NVD

Published: 2008-02-13

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.0717