CVE-2007-5587
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft...
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
- Record
CVE-2007-5587- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119, CWE-264
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
- Record
CVE-2007-5587- Updated
- 2026-11-02
EUVDEUVD-2007-5562 No score
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
- Record
EUVD-2007-5562- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6r6-w5wr-6658 No score
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft...
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
- Record
GHSA-f6r6-w5wr-6658- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation | 2007-10-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5587 is a medium vulnerability (CVSS 6.9) in Macrovision Safedisc, published October 19, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.90%, the 87th percentile. No source names a fixed version.
References
reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=43&Itemid=15
blog.48bits.com?p=172
secunia.com/advisories/27285
microsoft.com/technet/security/advisory/944653.mspx
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4584
vupen.com/english/advisories/2007/3537
Show 13 moreShow less
securityfocus.com/archive/1/485268/100/0/threaded
symantec.com/enterprise/security_response/weblog/2007/10/privilege_escalation_exploit_i.html
osvdb.org/41429
us-cert.gov/cas/techalerts/TA07-345A.html
exchange.xforce.ibmcloud.com/vulnerabilities/37284
securityreason.com/securityalert/3266
securitytracker.com/id?1018833
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-067
nvd.nist.gov/vuln/detail/CVE-2007-5587
github.com/advisories/GHSA-f6r6-w5wr-6658