First 4 Internet XCP-Aurora Unspecified Local Vulnerabilities

Bugtraq ID:	15432
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 15 2005 12:00AM
Updated:	Nov 15 2005 12:00AM
Credit:	David Maynor of the X-Force Advanced Research and Development team researched this issue.
Vulnerable:	First 4 Internet XCP-Aurora
Not Vulnerable:

First 4 Internet XCP-Aurora Unspecified Local Vulnerabilities

Multiple unspecified vulnerabilities are present in the kernel driver contained in the First 4 Internet XCP-Aurora DRM software. As these issues are in a kernel driver, local attackers may exploit these issues to gain SYSTEM level privileges.

One or more of these issues may be buffer overflow-related, as the corruption of kernel memory is stated to occur, allowing arbitrary code execution in the context of the local kernel.

Further details are not currently available. This BID will be updated when more information is available.

First 4 Internet XCP-Aurora Unspecified Local Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

First 4 Internet XCP-Aurora Unspecified Local Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

First 4 Internet XCP-Aurora Unspecified Local Vulnerabilities

References:

• Sony BMG Bundled Software Vulnerabilities (Internet Security Systems)
  
• XCP (First 4 Internet Ltd.)