Print
Discuss
Send to friend
RSS feedsMicrosoft has warned that attackers are actively targeting a security vulnerability in the SafeDisc DRM technology that ships as part of Windows.
The problem affects the 'secdrv.sys' file, a component of the SafeDisc copy encryption developed by Macrovision and sold to game developers.
The DRM technology is bundled with Windows Server 2003, Windows XP and Windows Vista, but does not affect Windows Vista.
Danish security website Secunia rates the vulnerability as 'less critical', the second step on a five step severity scale. The risk to end users is limited because a successful exploit requires attackers to have an account on the targeted system.
Symantec first disclosed the issue on a company blog 20 days ago. Microsoft told the firm at the time that it was aware of the issue and was working on a fix.
Microsoft issued a security advisory on Monday in which it disclosed the ongoing attacks.
The company also linked to a patch that Macrovision has since issued, and said that Windows systems will be updated as part of the next Patch Tuesday update scheduled for 13 November.
See also:
Why will so much commercial software not run on Vista? 06 Nov 2007
130MB download promises to bridge the online-offline gap 07 Nov 2007
Tweaked licensing terms to improve interoperability 06 Nov 2007
Redmond allegedly squeezed out Mandriva in educational laptop sale 02 Nov 2007All Bugs & Fixes
del.icio.us
Digg this
reddit!
