7.2

CVE-2007-5633

Exploit

EPSS 0.12%
Veröffentlicht 23.10.2007 17:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the (1) IOCTL_RDMSR 0x9C402438 and (2) IOCTL_WRMSR 0x9C40243C IOCTLs to \Device\speedfan, as demonstrated by an IOCTL_WRMSR action on MSR_LSTAR.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Almico ≫ Speedfan Version4.33

Microsoft ≫ Windows Vista Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.318

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://osvdb.org/41842

http://secunia.com/advisories/27312

http://www.bugtrack.almico.com/view.php?id=987

Exploit

http://www.reversemode.com/index.php?option=com_content&task=view&id=42&Itemid=1

http://www.securityfocus.com/bid/26123

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/37298

https://nvd.nist.gov/vuln/detail/CVE-2007-5633

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5633

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5633

EUVD