CVE-2007-5762 NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with th...
HighCVSS 7.2
EPSS 0.88%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell netware client | = 4.91-sp4 | No fix listed |
References
- download.novell.com patch
- 20080109 Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability patch third-party-advisory
- 28396 third-party-advisory vendor-advisory
- 27209 patch vdb-entry
- 1019172 vdb-entry
- ADV-2008-0088 vdb-entry
- novell-client-nicm-privilege-escalation(39576) vdb-entry