7.2
CVE-2007-5633
- EPSS 0.94%
- Veröffentlicht 23.10.2007 17:46:00
- Zuletzt bearbeitet 16.06.2026 22:46:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the (1) IOCTL_RDMSR 0x9C402438 and (2) IOCTL_WRMSR 0x9C40243C IOCTLs to \Device\speedfan, as demonstrated by an IOCTL_WRMSR action on MSR_LSTAR.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.94% | 0.561 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://osvdb.org/41842
http://secunia.com/advisories/27312
http://www.bugtrack.almico.com/view.php?id=987
http://www.reversemode.com/index.php?option=com_content&task=view&id=42&Itemid=1
http://www.securityfocus.com/bid/26123
https://exchange.xforce.ibmcloud.com/vulnerabilities/37298