CVE-2007-5762

high

Description

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/39576

http://www.vupen.com/english/advisories/2008/0088

http://www.securitytracker.com/id?1019172

http://www.securityfocus.com/bid/27209

http://secunia.com/advisories/28396

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637

http://download.novell.com/Download?buildid=4FmI89wOmg4~

Details

Source: Mitre, NVD

Published: 2008-01-09

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H