CVE-2013-3697

N/A

Published: July 31, 2013 at 10:00 AM UTC

Updated: June 16, 2026 at 11:55 PM UTC

1 product affected across 1 vendorClient· also runs on 6 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.5%

Description

Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windows Server 2008 and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 might allow local users to gain privileges via a crafted 0x1439EB IOCTL call.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Client · Novell

95%

2.0 sp2 2.0 sp3 4.91 sp5

microsoft-windows-2003-server (environment) · microsoft-windows-7 (environment) · microsoft-windows-8 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)