CVE-2007-5587 Memory corruption in n/a
Local attackers can exploit a buffer overflow in the SafeDisc driver to overwrite memory and gain elevated privileges on affected Windows systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-5587?
CVE-2007-5587 is a medium-severity memory corruption vulnerability in n/a, published on 19 Oct 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
Which versions are affected by CVE-2007-5587?
It affects 1 product.
Products include Macrovision Safedisc.
How do I fix CVE-2007-5587?
No fix has been published for CVE-2007-5587 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-5587 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-5587 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as CVE-2007-5586, GHSA-f6r6-w5wr-6658.