A vulnerability has been identified in Novell Client, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a buffer overflow error in the "nwspool.dll" module when processing malformed data, which could be exploited by remote attackers to execute arbitrary code.

Affected Products

Novell Client for Windows 2000/XP/2003 version 4.91 SP4 and prior

Solution

Apply patch :
http://download.novell.com/Download?buildid=35u0-_z6wT8~

References

http://www.vupen.com/english/advisories/2007/2689
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html

Credits

Vulnerability reported by TippingPoint Technologies.

Changelog

2007-07-30 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.