[Osiris]

Microsoft To Patch Driver Vulnerability

Microsoft is warning Windows XP and Server 2003 users of a faulty driver used for copy protection that could allow a hacker to gain high-level access to their systems. The company is currently working on a fix for the problem but did say it was concerned that the vulnerability had been disclosed before it had a chance to fix it.

The problem lies with a driver called secdrv.sys, which is part Macrovision's SafeDisc software included with Windows Server 2003 and Windows XP. The software, which can block unauthorized copying of some media, also ships with Windows Vista, but that OS is not affected.