Unscored severity · published Jan 9, 2008
CVE-2007-5762
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel…
–
CVSS
0.9%
EPSS
No
On KEV
Description
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netware Client · Novell
4.91 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5762
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5762
Patch
http://download.novell.com/Download?buildid=4FmI89wOmg4~
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637
Vendor Advisory
http://secunia.com/advisories/28396
Patch
http://www.securityfocus.com/bid/27209
www.securitytracker.com
http://www.securitytracker.com/id?1019172
www.vupen.com
http://www.vupen.com/english/advisories/2008/0088
More from Netware Client
–
CVE-2006-5854
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument…
–
CVE-2002-1754
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the…