CVE-2007-5634

SpeedFan 4.33 - Local Denial of Service via IOCTL 0x9c402420 Buffer Overflow

Title source: llm
STIX 2.1

Description

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37299
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27312

Scores

EPSS 0.0039
EPSS Percentile 31.6%

Details

CWE
CWE-119
Status published
Products (1)
almico/speedfan 4.33
Published Oct 23, 2007
Tracked Since Feb 18, 2026