CVE-2007-5762

Novell Netware Client - Improper Input Validation

Title source: rule
STIX 2.1

Description

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

Exploits (1)

exploitdb WORKING POC VERIFIED
by sickness · pythonlocalwindows
https://www.exploit-db.com/exploits/18914

References (7)

Core 7
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27209
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28396
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0088
Patch third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019172

Scores

EPSS 0.0048
EPSS Percentile 65.0%

Details

CWE
CWE-20
Status published
Products (1)
novell/netware_client 4.91 sp4
Published Jan 09, 2008
Tracked Since Feb 18, 2026