VulnerabilityModified
CVE-2007-5762
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
HIGH 7.2EPSS 0.88%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- novell/netware client
- Source
- cve@mitre.org
References
- http://download.novell.com/Download?buildid=4FmI89wOmg4~Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637Patch
- http://secunia.com/advisories/28396Vendor Advisory
- http://www.securityfocus.com/bid/27209Patch
- http://www.securitytracker.com/id?1019172
- http://www.vupen.com/english/advisories/2008/0088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
- http://download.novell.com/Download?buildid=4FmI89wOmg4~Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637Patch
- http://secunia.com/advisories/28396Vendor Advisory
- http://www.securityfocus.com/bid/27209Patch
- http://www.securitytracker.com/id?1019172
- http://www.vupen.com/english/advisories/2008/0088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.