CVE-2007-5587

The CVE-2007-5587 entry describes a local privilege-escalation vulnerability in Macrovision SafeDisc’s secdrv.sys driver. The root cause is a buffer overflow in secdrv.sys before 4.3.86.0, triggered by a crafted argument to a METHOD_NEITHER IOCTL, affecting Windows XP SP2, XP x64, Server 2003 SP1...

CVE-2006-1197

CVE-2006-1197 : The entry describes that SafeDisc installs a driver service for the insecurely-permissioned secdrv.sys, enabling local users to gain privileges by altering the service configuration to reference a malicious program. This establishes a local-privilige-elevation scenario as stated; ...