Vulnerability Description
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Vista | All versions |
| Almico | Speedfan | 4.33 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/27312
- http://www.bugtrack.almico.com/view.php?id=987Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37299
- http://secunia.com/advisories/27312
- http://www.bugtrack.almico.com/view.php?id=987Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37299
FAQ
What is CVE-2007-5634?
CVE-2007-5634 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a...
How severe is CVE-2007-5634?
CVE-2007-5634 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-5634?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Vista, Almico Speedfan.