Description
SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe.
References
- ADV-2005-2783 vdb-entry
- http://www.eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf
- 15754 vdb-entry
- http://www.eff.org/news/archives/2005_12.php#004234
- VU#928689 third-party-advisory
- 17933 third-party-advisory
- 1015327 vdb-entry