PT-2007-6607 · Microsoft+1 · Windows Server 2003+5

Elia Florip + 3 · Published 2007-10-19 · Updated 2018-10-15 · CVE-2007-5587

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Microsoft Windows XP x64 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Microsoft Windows Server 2003 x64 SP2 secdrv.sys version prior to 4.3.86.0

Description A buffer overflow issue exists in the Macrovision SafeDisc secdrv.sys driver, allowing local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD NEITHER IOCTL.

Recommendations For Microsoft Windows XP SP2, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows XP Professional x64, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows XP x64 SP2, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows Server 2003 SP1, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows Server 2003 SP2, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows Server 2003 x64, update the secdrv.sys driver to version 4.3.86.0 or later. For Microsoft Windows Server 2003 x64 SP2, update the secdrv.sys driver to version 4.3.86.0 or later. As a temporary workaround, consider restricting access to the secdrv.sys driver until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-264

CWE-119

Related Identifiers

CVE-2007-5587

Affected Products

Windows Server 2003

Windows Server 2003 X64

Windows Xp

Windows Xp Professional X64

Windows Xp X64

Secdrv.Sys

References · 19

• 🔥 https://exploit-db.com/exploits/30680 · Exploit
• 🔥 http://blog.48bits.com/?p=172 · Exploit
• http://microsoft.com/technet/security/advisory/944653.mspx · Vendor Advisory
• http://securityfocus.com/archive/1/485268/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5587 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-067 · Vendor Advisory
• http://reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=15 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4584 · Note
• http://osvdb.org/41429 · Note
• http://secunia.com/advisories/27285 · Note
• http://vupen.com/english/advisories/2007/3537 · Note
• http://securityreason.com/securityalert/3266 · Note
• http://securitytracker.com/id?1018833 · Note
• http://securityfocus.com/archive/1/482474/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37284 · Note