CVE-2007-5762

Currently unrated

Key Information:

Vendor
Novell
Status
Netware Client
Vendor
CVE Published:
9 January 2008

Summary

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

References

http://www.securityfocus.com/bid/27209
vdb-entryx_refsource_BID
http://secunia.com/advisories/28396
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0088
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.