CVE-2007-5587
EXPLOITED IN THE WILDMacrovision SafeDisc < 4.3.86.0 - Local Privilege Escalation via METHOD_NEITHER IOCTL Buffer Overflow
Title source: llmExploitation Summary
CVE-2007-5587 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Elia Florio.
AI-analyzed exploit summary The provided text describes a local privilege escalation vulnerability in Macrovision SafeDisc due to insufficient input sanitization, allowing arbitrary code execution with SYSTEM privileges on Windows XP and 2003. The reference links to an external exploit archive but does not include functional exploit code.
Description
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
Exploits (1)
The provided text describes a local privilege escalation vulnerability in Macrovision SafeDisc due to insufficient input sanitization, allowing arbitrary code execution with SYSTEM privileges on Windows XP and 2003. The reference links to an external exploit archive but does not include functional exploit code.