Secunia

A vulnerability has been reported in AnyDVD, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to potentially gain escalated privileges.

The vulnerability is caused due to insufficient validation of user space data provided to the ElbyCDIO.sys kernel driver. This can be exploited to trigger a memory corruption and potentially execute arbitrary code in kernel space via a specially crafted IOCTL request.

The vulnerability is reported in versions 6.5.2.2 and prior.

Solution
Update to version 6.5.2.6 or later.

Provided and/or discovered by
Nikita Tarakanov, Positive Technologies

Changelog
Further details available in Customer Area

Original Advisory
Positive Technologies:
http://en.securitylab.ru/lab/PT-2009-11

SlySoft:
http://www.slysoft.com/download/changes_anydvd.txt

NT Internals:
http://www.ntinternals.org/ntiadv0812/ntiadv0812.html

Deep Links
Links available in Customer Area