PT-2005-4270 · Sony · Sony First4Internet Xcp Drm

Publicado 2005-11-03 · Atualizado 2008-09-05 · CVE-2005-3474

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sony First4Internet XCP DRM software (affected versions not specified)

Description The issue concerns the aries.sys driver in the Sony First4Internet XCP DRM software, which can hide files, registry keys, or processes with names starting with "$sys$". This allows attackers to conceal malicious activities on systems that utilize XCP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3474

Produtos afetados

Sony First4Internet Xcp Drm

Referências · 5

• http://sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html · Nota
• http://securitytracker.com/id?1015145 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3474 · Nota de Segurança
• http://secunia.com/advisories/17408 · Aviso do Fabricante
• http://osvdb.org/20435 · Nota