twitter's Journal: Macrovision Bug is Six Years Old.

The recently reported Macrovision bug has actually been around for six years.

Flawed antipiracy software now being exploited by attackers has been bundled with Windows for the last six years to protect game publishers, Macrovision Corp. said today. The "secdrv.sys" driver has shipped with all versions of Windows XP, Windows Server 2003 and Windows Vista ... users do not have to play a SafeDisc-protected game to be vulnerable.

The article goes on to play down danger and claim that Vista is safe (for those that can make Vista run at all), but zdnet notes:

Malware authors are actively exploiting a zero-day privilege escalation vulnerability ... [which] can be exploited overwrite arbitrary kernel memory and execute arbitrary code with SYSTEM privileges. This facilitates the complete compromise of affected computers.

Conversation is here.