Eskape Labs MyTV/x Driver Privilege Escalation Vulnerability

Bugtraq ID:	26577
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 26 2007 12:00AM
Updated:	Nov 27 2007 04:03PM
Credit:	David Wharton <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Eskape Labs MyTV/x 4.0.8 Eskape Labs MyTV/x 3.6.6
Not Vulnerable:

Eskape Labs MyTV/x Driver Privilege Escalation Vulnerability

MyTV/x is prone to a privilege-escalation vulnerability.

This issue occurs when powering on a MyTV.PVR (Personal Video Recorder) device under certain conditions.

NOTE: To exploit this issue, an attacker must have physical access to the affected computer and PVR device.

Attackers can exploit this issue to gain superuser privileges on an affected computer. Successful attacks will completely compromise affected computers.

MyTV/x 3.6.6 and 4.0.8 are vulnerable; other versions may also be affected.

Eskape Labs MyTV/x Driver Privilege Escalation Vulnerability

Attackers can exploit this issue by gaining physical access to an affected computer and PVR device.

Eskape Labs MyTV/x Driver Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Eskape Labs MyTV/x Driver Privilege Escalation Vulnerability

References:

• Vendor Homepage (Eskape Labs)