PT-2001-2058 · Digital Content Protection · Hdcp System

Published 2001-11-20 · Updated 2016-10-18 · CVE-2001-0903

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HDCP System (affected versions not specified)

Description The issue concerns the linear key exchange process in the High-bandwidth Digital Content Protection (HDCP) System, which allows remote attackers to access data as plaintext. This enables them to avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0903

Affected Products

Hdcp System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0903 · Security Note
• http://nunce.org/hdcp/hdcp111901.htm · Vendor Advisory
• http://iss.net/security_center/static/7612.php · Note
• http://securityfocus.com/bid/3558 · Note
• http://marc.info/?l=bugtraq&m=100626641009560&w=2 · Note