CVE-2007-5587

Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argume...

CVE-2007-5587: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argume...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exi...

Macrovision SafeDisc - SecDRV.SYS Method_Neither Privilege Escalation

Macrovision SafeDisc - SecDRV.SYS MethodNeither Privilege Escalation source: https://www.securityfocus.com/bid/26121/info Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this vulnerability allows...

Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation

source: https://www.securityfocus.com/bid/26121/info Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this vulnerability allows local attackers to execute arbitrary malicious code with SYSTEM-level...

Design/Logic Flaw

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197

CVE-2006-1197 : The entry describes that SafeDisc installs a driver service for the insecurely-permissioned secdrv.sys, enabling local users to gain privileges by altering the service configuration to reference a malicious program. This establishes a local-privilige-elevation scenario as stated; ...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197: Undefined Security Weakness

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

Copy protection scheme SafeDisc allows privilege escalation

I have a found a serious flaw in the well-known and widely deployed copy protection scheme SafeDisc. The issues arrises from the how the installation of the driver secdrv.sys is managed. When installed, the associated driver service is assigned the SECHANGECONFIG flag, which means that any user i...