CVE-2007-5762

Published: Jan 9, 2008Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

Affected (1)

Products: Novell: Netware Client

Novell

1 product

Netware Client

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Netware Client	Version 4.91 sp4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://download.novell.com/Download?buildid=4FmI89wOmg4~

Source: cve@mitre.org

Patch

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637

Source: cve@mitre.org

Patch

http://secunia.com/advisories/28396

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/27209

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1019172

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0088

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39576

Source: cve@mitre.org

http://download.novell.com/Download?buildid=4FmI89wOmg4~