PT-2001-2058 · Digital Content Protection · Hdcp System

Publicado 2001-11-20 · Atualizado 2016-10-18 · CVE-2001-0903

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HDCP System (affected versions not specified)

Description The issue concerns the linear key exchange process in the High-bandwidth Digital Content Protection (HDCP) System, which allows remote attackers to access data as plaintext. This enables them to avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0903

Produtos afetados

Hdcp System

Referências · 5

• http://iss.net/security_center/static/7612.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0903 · Nota de Segurança
• http://securityfocus.com/bid/3558 · Nota
• http://marc.info/?l=bugtraq&m=100626641009560&w=2 · Nota
• http://nunce.org/hdcp/hdcp111901.htm · Aviso do Fabricante