PT-2008-5228 · Microsoft · Windows Vista

CVE-2008-3893 · Publicado 2008-09-03 · Atualizado 2025-04-03

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Vista versions prior to SP1

Description The issue allows local users to obtain sensitive information by reading physical memory locations associated with the BIOS Keyboard buffer, which stores pre-boot authentication passwords. This occurs because the buffer is not cleared during boot.

Recommendations For Windows Vista versions prior to SP1, apply Service Pack 1 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-3893

Produtos afetados

Windows Vista

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-3893 · Nota de Segurança
• http://secunia.com/advisories/31619 · Aviso do Fabricante
• http://ivizsecurity.com/security-advisory-iviz-sr-0801.html · Nota
• https://t.me/cvenotify/117563 · Publicação no Telegram