CVE-2007-5633: High severity Microsoft Windows Vista vulnerability
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the (1) IOCTLRDMSR 0x9C402438 and (2) IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as demonstrated by an IOCTLWRMSR action on MSRLSTAR.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5633?
CVE-2007-5633 is considered a high severity vulnerability due to its potential for privilege escalation and execution of unsigned drivers.
How do I fix CVE-2007-5633?
To fix CVE-2007-5633, update to a later version of SpeedFan that addresses this vulnerability.
What platforms are affected by CVE-2007-5633?
CVE-2007-5633 specifically affects Microsoft Windows Vista x64 when using SpeedFan version 4.33.
What are the potential impacts of CVE-2007-5633?
The vulnerability may allow local users to gain elevated privileges and the ability to load arbitrary unsigned drivers.
Who is the vendor for the affected software in CVE-2007-5633?
The affected software, SpeedFan, is developed by Almico.