November 5th, 2007
Macrovision plugs gaping hole in DRM software
Macrovision has shipped a fix for a gaping hole in its SafeDisc (secdrv.sys) copy protection software, belatedly blocking an in-the-wild malware attack.
The Macrovision patch (.zip file) comes a full 20 days after researchers at Symantec spotted a zero-day attack exploiting this vulnerability.
Immediately after Symantec went public with the discovery, exploit code (.zip file) for the issue was published on the Internet. Functional exploit is commercially available through the CORE IMPACT and Immunity Canvas penetration testing platforms.
Microsoft also issued a formal security advisory with a strong recommendation for Windows XP and Windows Server 3003 users to apply the Macrovision update.
I’d told that Microsoft plans to roll out the fix automatically to Windows users on Patch Tuesday (November 13).
Ryan Naraine is a journalist and security evangelist at Kaspersky Lab. He manages Threatpost.com, a security news portal. Here is Ryan's full profile and disclosure of his industry affiliations.
For daily updates on Ryan's activities, follow him on Twitter.
Subscribe to Zero Day via Email alerts or RSS.
