Hallo zusammen,
in Ergänzung zu den Microsoft Security Bulletins wurde folgende Sicherheitsempfehlung veröffentlicht:
What is this alert?
This alert is to notify you that Microsoft has released Security Advisory 944653 – Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege - on 05 November 2007.
Summary:
Microsoft is working with Macrovision to investigate new public reports of a vulnerability in the Macrovision secdrv.sys driver on supported editions of Windows Server 2003 and Windows XP. This vulnerability does not affect Windows Vista.
We are aware of limited attacks that try to exploit the reported vulnerability. Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This will include providing a security update through our monthly release process.
Recommendations:
Review Microsoft Security Advisory 944653 for an overview of the issue, details on affected components, mitigating factors, suggested actions, frequently asked questions (FAQ) and links to additional resources.
Additional Resources:
Microsoft Security Advisory 944653 – Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege:
Microsoft Security Advisory (944653): Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege
Regarding Information Consistency:
We strive to provide you with accurate information in static (this mail) and dynamic (web-based) content. Security Advisories posted to the web are occasionally updated to reflect late-breaking information. If this results in an inconsistency between the information here and the information in the web-based Security Advisory, the information in the web-based Security Advisory is authoritative.
If you have any questions regarding this alert please contact your Technical Account Manager or Application Development Consultant.
Thank you,
Microsoft CSS Security Team
