Executive Summary

Summary
Title Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)
Informations
Name MS07-067 First vendor Publication 2007-12-11
Vendor Microsoft Last vendor Modification 2007-12-11
Severity (Vendor) Important Revision N/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 6.9 Attack Range Local
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 3.4 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

This important security update resolves one publicly disclosed vulnerability. A local elevation of privilege vulnerability exists in the way that the Macrovision driver incorrectly handles configuration parameters. A local attacker who successfully exploited this vulnerability could take control of the system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

Original Source

Url : http://www.microsoft.com/technet/security/bulletin/ms07-067.mspx

CWE : Common Weakness Enumeration

idName
CWE-264Permissions, Privileges, and Access Controls
CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:4584
 
Oval ID: oval:org.mitre.oval:def:4584
Title: Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege
Description: Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
Family: windows Class: vulnerability
Reference(s): CVE-2007-5587
Version: 1
Platform(s): Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): Macrovision
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

Open Source Vulnerability Database (OSVDB)

idDescription
41429Macrovision SafeDisc secdrv.sys Crafted METHOD_NEITHER IOCTL Local Overflow

Nessus® Vulnerability Scanner

DateDescription
2007-12-11Name : The remote Windows host contains a kernel driver that is prone to a local pri...
File : smb_nt_ms07-067.nasl - Type : ACT_GATHER_INFO
2007-11-13Name : The remote Windows host contains a kernel driver that is prone to a local pri...
File : macrovision_secdrv_priv_escalation.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 11:45:49
  • Multiple Updates
2013-05-11 12:22:05
  • Multiple Updates