OSVDB ID: 20435 Title: Sony CD First4Internet XCP DRM aries.sys Local File/Process Manipulation |
Info |
|
|
Dates |
||||
|
|
Description |
The First4Internet XCP DRM software used to playback Sony copy-protected music CDs contains a flaw that may allow a malicious user to arbitrary manipulate local files and processes. The problem is that the 'aries.sys' driver hides any files, registry keys and/or processes with a name that starts with '$sys$', which may allow a malicious user to hide certain activities on a system that uses XCP resulting in a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, First 4 Internet has released a patch to address this vulnerability. It is reported that this patch still does not allow a user to uninstall the First4Internet software though. |
Products |
|
References |
|
Credit |
|
sysinternals.com - SysInternals