1. Home
  2. CVE Database
  3. CVE-2013-3697
HIGH · 7.2

CVE-2013-3697

Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windo...

Vulnerability Description

Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windows Server 2008 and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 might allow local users to gain privileges via a crafted 0x1439EB IOCTL call.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
NovellClient4.91
MicrosoftWindows 2003 ServerAll versions
MicrosoftWindows XpAll versions
MicrosoftWindows Server 2008-
MicrosoftWindows VistaAll versions
MicrosoftWindows 7All versions
MicrosoftWindows 8-

Related Weaknesses (CWE)

CWE-189

References

FAQ

What is CVE-2013-3697?

CVE-2013-3697 is a vulnerability with a CVSS score of 7.2 (HIGH). Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windo...

How severe is CVE-2013-3697?

CVE-2013-3697 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3697?

Check the references section above for vendor advisories and patch information. Affected products include: Novell Client, Microsoft Windows 2003 Server, Microsoft Windows Xp, Microsoft Windows Server 2008, Microsoft Windows Vista.