CVE-2013-3697: Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows...

Security readout for executives and security teams

CVE-2013-3697 is a local privilege-escalation issue in Novell Client kernel drivers on older Windows systems. An attacker already able to run code locally might use the driver flaw to gain higher privileges. This is most urgent where legacy Novell Client deployments remain on endpoint or server builds listed in the CVE. Exposure is likely limited to legacy Windows hosts running the named Novell Client versions and kernel drivers. Internet-facing exposure is not indicated because the issue requires local user access. Treat this as a legacy estate cleanup and privilege-control issue. It is not described as remotely exploitable, but affected systems could let a low-privileged local user become more powerful. Mitigation focus: Inventory hosts for the affected Novell Client versions and drivers.; Review Novell KB 7012497 for vendor-approved remediation guidance.; Upgrade or remove legacy Novell Client installations where business need has ended..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.