CVEvulnerability
CVE-2007-5762
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Affected configurations
• novell netware client 4.91
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://download.novell.com/Download?buildid=4FmI89wOmg4~ Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637 Patch
- http://secunia.com/advisories/28396 Vendor Advisory
- http://www.securityfocus.com/bid/27209 Patch
- http://www.securitytracker.com/id?1019172 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0088 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576 exchange.xforce.ibmcloud.com
- http://download.novell.com/Download?buildid=4FmI89wOmg4~ Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637 Patch
- http://secunia.com/advisories/28396 Vendor Advisory
- http://www.securityfocus.com/bid/27209 Patch
- http://www.securitytracker.com/id?1019172 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0088 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576 exchange.xforce.ibmcloud.com