VULNERABILITY INTELLIGENCE

CVE-2007-5762

CVSS score7.2 HIGH
EPSS probability0.88%
CISA KEVNot currently listed
Published2008-01-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references