CVE-2007-5762: Novell Netware Client

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

Affected products

• Novell Netware Client: version 4.91 only

Published 2008-01-09. Last modified 2026-06-16.