CVE-2007-5587 Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 al...
MediumCVSS 6.9
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macrovision safedisc | All versions | No fix listed |
References
- blog.48bits.com exploit
- 41429 vdb-entry
- 27285 third-party-advisory
- 3266 third-party-advisory
- 944653 vendor-advisory
- www.reversemode.com
- 20071017 Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day) mailing-list
- 20071018 [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day) mailing-list
- SSRT071506 vendor-advisory
- 26121 vdb-entry
- 1018833 vdb-entry
- www.symantec.com
- TA07-345A third-party-advisory us-government-resource
- ADV-2007-3537 vdb-entry
- MS07-067 vendor-advisory
- windows-secdrv-bo(37284) vdb-entry
- oval:org.mitre.oval:def:4584 signature vdb-entry