OSVDB ID: 41429

Title: Macrovision SafeDisc secdrv.sys Crafted METHOD_NEITHER IOCTL Local Overflow

Info

Disclosure

Oct 17, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Dec 11, 2007

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Commercial
Disclosure: Vendor Verified, Uncoordinated Disclosure, Discovered in the Wild

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1018833
CVE ID: 2007-5587 (see also: NVD)
Bugtraq ID: 26121
Secunia Advisory ID: 27285
ISS X-Force ID: 37284
Microsoft Knowledge Base Article: 944653
VUPEN Advisory: ADV-2007-3537
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-10/0275.html
http://archives.neohapsis.com/archives/bugtraq/2007-10/0284.html
Other Advisory URL: http://blog.48bits.com/?p=172
http://securityreason.com/securityalert/3266
http://www.microsoft.com/technet/security/advisory/944653.mspx
http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=15
http://www.symantec.com/enterprise/security_response/weblog/2007/10/privilege_escalation_exploit_i.html
Generic Exploit URL: http://immunitysec.com
Microsoft Security Bulletin: MS07-067

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/41429