libnicm.sys

Novell XTCOM Services kernel driver

From Novell (now OpenText)

Part of the Novell family

Status

On a known-vulnerable list

Known variants

6 distinct hashes

Public CVEs

Field notes

libnicm.sys is the original filename of nicm.sys, distributed as part of the Novell XTCOM Services component of the Novell Client. The vulnerability story is the same as nicm.sys; both files come from the same source.

Not a typical gaming-PC driver. Its presence usually reflects a previous enterprise install.

What the record shows

libnicm.sys is listed as a known-vulnerable driver on the public LOLDrivers project. 6 distinct binary hashes matching this filename are on record, meaning multiple versions of the file have been observed.

Public CVEs

CVE-2013-3956

What this means, plainly

Presence is not proof of misuse. Driver files on the LOLDrivers list commonly ship with legitimate hardware tools, gaming software, or vendor utilities. Their presence is recorded as evidence on a record. It is never treated as a verdict about a person.

Related drivers

Other drivers in the Novell family. See the whole family →

nscm.sys nicm.sys

Source

Status data comes from the public LOLDrivers project, a community-curated registry of drivers known to be vulnerable or malicious. The snapshot Vera uses was refreshed July 10, 2026. CVE links go to the NIST National Vulnerability Database.

In plain words

Kernel driver BYOVD Ring 0 Code-signing certificate Certificate revocation The full glossary →

Cite this entry

Vera Project. “libnicm.sys.” Vera Field Guide (Driver). The Vera Project. https://www.veraproject.xyz/field-guide/drivers/libnicm-sys