CVE-2007-5634

Published: Oct 23, 2007Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.

Affected (1)

Products: Almico: Speedfan

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Almico Speedfan	Version 4.33

Running on/with	Platform Versions
Microsoft Windows Vista	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://secunia.com/advisories/27312

Source: cve@mitre.org

http://www.bugtrack.almico.com/view.php?id=987

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/37299

Source: cve@mitre.org

http://secunia.com/advisories/27312

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.bugtrack.almico.com/view.php?id=987

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/37299

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.