Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation

source: https://www.securityfocus.com/bid/26121/info Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this vulnerability allows local attackers to execute arbitrary malicious code with SYSTEM-level...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

Design/Logic Flaw

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197

CVE-2006-1197 : The entry describes that SafeDisc installs a driver service for the insecurely-permissioned secdrv.sys, enabling local users to gain privileges by altering the service configuration to reference a malicious program. This establishes a local-privilige-elevation scenario as stated; ...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

Copy protection scheme SafeDisc allows privilege escalation

I have a found a serious flaw in the well-known and widely deployed copy protection scheme SafeDisc. The issues arrises from the how the installation of the driver secdrv.sys is managed. When installed, the associated driver service is assigned the SECHANGECONFIG flag, which means that any user i...