The problem affects the 'secdrv.sys' file, a component of the SafeDisc copy encryption developed by Macrovision and sold to game developers.
The DRM technology is bundled with Windows Server 2003, Windows XP and Windows Vista, but does not affect Windows Vista.
Danish security website Secunia rates the vulnerability as 'less critical', the second step on a five step severity scale. The risk to end users is limited because a successful exploit requires attackers to have an account on the targeted system.
Symantec first disclosed the issue on a company blog 20 days ago. Microsoft told the firm at the time that it was aware of the issue and was working on a fix.
Microsoft issued a security advisory on Monday in which it disclosed the ongoing attacks.
The company also linked to a patch that Macrovision has since issued, and said that Windows systems will be updated as part of the next Patch Tuesday update scheduled for 13 November.
Attackers target Windows DRM flaw
By
Tom Sanders
on Nov 8, 2007 6:27AM
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
_(21).jpg&h=142&w=230&c=1&s=1)
Empowering Sustainability: Schneider Electric's Dedication to Powering Customer Success
Beyond the box: How Crayon Is Redefining Distribution for the Next Era
Guiding customers on the uneven path to AI adoption
.png&h=142&w=230&c=1&s=1)
How mandatory climate reporting is raising the bar for corporate leadership
Shared Intelligence is the Real Competitive Edge Partners Enjoy with Crayon
Sponsored Whitepapers
Cut through the SASE confusion
Stay protected as cyber threats evolve
Defend Your Network from the Next Generation of AI Threats
.jpg&w=100&c=1&s=0)
The race to AI advantage is on. Don’t let slow consulting projects hold you back.
_(8).jpg&w=100&c=1&s=0)
The changing face of Australian distribution
