Novell Client 'VBA32 AntiRootKit' Component IOCTL Handling Local Denial of Service Vulnerability

Bugtraq ID:	64484
Class:	Input Validation Error
CVE:	CVE-2013-3705
Remote:	No
Local:	Yes
Published:	Dec 10 2013 12:00AM
Updated:	Dec 10 2013 12:00AM
Credit:	Dmitry Varshavsky
Vulnerable:	Novell Client 2.0 Sp3 Novell Client 2.0 Sp2
Not Vulnerable:	Novell Client 2.0 Sp3 (IR5)

Novell Client 'VBA32 AntiRootKit' Component IOCTL Handling Local Denial of Service Vulnerability

Novell Client for Windows is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to cause a system crash, resulting in a denial-of-service condition.

Novell Client 'VBA32 AntiRootKit' Component IOCTL Handling Local Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell Client 'VBA32 AntiRootKit' Component IOCTL Handling Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Novell Client 'VBA32 AntiRootKit' Component IOCTL Handling Local Denial of Service Vulnerability

References:

• Novell Client 2 SP3 for Windows (IR5) (Novell)
  
• Novell Homepage (Novell)
  
• Security Vulnerability - BSOD in Vba32 AntiRootKit (Novell)