NVD

Id
57696  
Name
CVE-2007-5633  
Description
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the (1) IOCTL_RDMSR 0x9C402438 and (2) IOCTL_WRMSR 0x9C40243C IOCTLs to Devicespeedfan, as demonstrated by an IOCTL_WRMSR action on MSR_LSTAR.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-23  
Modified Date
2008-11-15  
Seq
2007-5633  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295257 57696 CVE-2007-5633 http://www.bugtrack.almico.com/view.php?id=987  View
295258 57696 CVE-2007-5633 http://www.reversemode.com/index.php?option=com_content&task=view&id=42&Itemid=1  View
295259 57696 CVE-2007-5633 26123  View
295260 57696 CVE-2007-5633 speedfan-ioctl-privilege-escalation(37298)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54134 JVNDB-2007-002826 Alfredo Milani Comparetti SpeedFan の Speedfan.sys における任意の 符号なしのドライバをロードされる脆弱性 Alfredo Milani Comparetti SpeedFan の Speedfan.sys は、Windows Vista x64 上で稼働する際、IOCTL 0x9c402420 呼び出しの間バッファを適切にチェックしないため、任意の MSR を読み書きされるおよび権限を取得されるおよび符号なしのドライバをロードされる脆弱性が存在します。 CVE-2007-5633 28988 CVE-2007-5633 57696 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002826.html 2007-10-23 2012-06-26 View