CVE-2007-5587: Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2,...

Security readout for executives and security teams

This is a local privilege escalation flaw in the Macrovision SafeDisc driver bundled with older Microsoft Windows releases. A user who already has local access could abuse a buffer overflow to gain higher privileges. The source says it was originally found in the wild, but KEV is false and no current exploitation evidence is provided. Exposure is most likely in legacy Windows XP SP2, XP x64, and Windows Server 2003 systems where the SafeDisc secdrv.sys driver is present and below 4.3.86.0. Treat this as high priority if any listed legacy Windows systems remain in business use. It is not a remote entry point, but it can turn limited local access into full system control on affected hosts. Mitigation focus: Apply Microsoft guidance from advisory 944653 and bulletin MS07-067.; Update secdrv.sys to 4.3.86.0 or later where applicable.; Identify and prioritize affected legacy Windows XP and Server 2003 systems..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.