CVE-2007-5634

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.

Score

CVSS 2.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2007-10-23

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Speedfan (Almico)

References

• http://secunia.com/advisories/27312
• http://www.bugtrack.almico.com/view.php?id=987
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37299