PT-2007-3566 · Microsoft · Windows Vista+1

Robbie Sohlman · Publicado 2007-06-12 · Atualizado 2018-10-16 · CVE-2007-2229

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista (affected versions not specified)

Description The issue concerns insecure default permissions for local user information data stores in the registry and the file system. This allows local users to obtain sensitive information, including administrative passwords. A local attacker could exploit this to access user account data, potentially using it to gain full access to the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-2229

Produtos afetados

Windows Vista

Windows

Referências · 12

• http://securityfocus.com/archive/1/471947/100/0/threaded · Aviso do Fabricante
• http://securityfocus.com/bid/24411 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-032 · Nota
• http://us-cert.gov/cas/techalerts/TA07-163A.html · Nota
• http://secunia.com/advisories/25623 · Aviso do Fabricante
• http://osvdb.org/35344 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529 · Nota
• http://vupen.com/english/advisories/2007/2152 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2229 · Nota de Segurança
• http://securitytracker.com/id?1018225 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2229 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 · Aviso do Fabricante