NVD

Id
57652  
Name
CVE-2007-5587  
Description
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-19  
Modified Date
2011-03-07  
Seq
2007-5587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294996 57652 CVE-2007-5587 http://blog.48bits.com/?p=172  View
294997 57652 CVE-2007-5587 oval:org.mitre.oval:def:4584  View
294998 57652 CVE-2007-5587 3266  View
294999 57652 CVE-2007-5587 944653  View
295000 57652 CVE-2007-5587 MS07-067  View
295001 57652 CVE-2007-5587 http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=15  View
295002 57652 CVE-2007-5587 20071017 Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day)  View
295003 57652 CVE-2007-5587 20071018 [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day)  View
295004 57652 CVE-2007-5587 SSRT071506  View
295005 57652 CVE-2007-5587 26121  View
295006 57652 CVE-2007-5587 1018833  View
295007 57652 CVE-2007-5587 http://www.symantec.com/enterprise/security_response/weblog/2007/10/privilege_escalation_exploit_i.html  View
295008 57652 CVE-2007-5587 TA07-345A  View
295009 57652 CVE-2007-5587 ADV-2007-3537  View
295010 57652 CVE-2007-5587 windows-secdrv-bo(37284)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52134 JVNDB-2007-000797 Microsoft Windows の Macrovision secdrv.sys ドライバにおけるバッファオーバーフローの脆弱性 Microsoft Windows の Macrovision SafeDisc には、secdrv.sys ドライバにおいて、METHOD_NEITHER IOCTL に渡される引数の取り扱いに不備があるために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-5587 28942 CVE-2007-5587 57652 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000797.html 2007-10-19 2007-12-26 View