CVE-2007-5762: Input Validation
First published: Wed Jan 09 2008(Updated: )
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell Client | =4.91-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637
- http://download.novell.com/Download?buildid=4FmI89wOmg4~
- http://www.securityfocus.com/bid/27209
- http://www.securitytracker.com/id?1019172
- http://secunia.com/advisories/28396
- http://www.vupen.com/english/advisories/2008/0088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
Frequently Asked Questions
What is the severity of CVE-2007-5762?
CVE-2007-5762 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2007-5762?
To fix CVE-2007-5762, ensure that you update to a patched version of Novell NetWare Client beyond version 4.91 SP4.
Who is affected by CVE-2007-5762?
CVE-2007-5762 affects local users of Novell NetWare Client version 4.91 SP4 due to improper handling of IOCTL requests.
What type of vulnerability is CVE-2007-5762?
CVE-2007-5762 is classified as a local privilege escalation vulnerability.
Can CVE-2007-5762 be exploited remotely?
No, CVE-2007-5762 requires local access to the system to exploit the vulnerability.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/novell
- canonical/novell client
- version/novell client/4.91-sp4