CVE-2007-5634

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-23 · updated 2026-06-16
Weakness: CWE-119

Description

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.

Affected products

Almico Speedfan: 4.33

References

http://secunia.com/advisories/27312
http://www.bugtrack.almico.com/view.php?id=987
https://exchange.xforce.ibmcloud.com/vulnerabilities/37299
http://secunia.com/advisories/27312
http://www.bugtrack.almico.com/view.php?id=987
https://exchange.xforce.ibmcloud.com/vulnerabilities/37299

Get alerted when CVE-2007-5634 or the next vulnerability affects your stack