CVE-2007-5762 json
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm de…
published 2008-01-09 18 y ago modified 2026-06-16 4 mo ago also EUVD-2007-5732
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 59%
- public exploits
- 1
- Exploit-DB
Summary
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Patch / fix
Timeline
- Published
- First public exploit (EDB-18914)
Exploit prediction
0.88% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-18914 Novell Client 4.91 SP4 - Local Privilege Escalation local, 2012-05-22
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
securityfocus.com
/bid/27209
vdb-entry, patch
-
download.novell.com
/Download?buildid=4FmI89wOmg4~
patch
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=637
third-party-advisory, patch
-
secunia.com
/advisories/28396
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2008/0088
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/39576
vdb-entry
-
securitytracker.com
/id?1019172
vdb-entry
Sources
- CVE List CVE-2007-5762
- NVD CVE-2007-5762
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.