SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the βSunnComm Sharedβ directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe.