PT-2007-3566 · Microsoft · Windows Vista+1

Robbie Sohlman · Published 2007-06-12 · Updated 2018-10-16 · CVE-2007-2229

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista (affected versions not specified)

Description The issue concerns insecure default permissions for local user information data stores in the registry and the file system. This allows local users to obtain sensitive information, including administrative passwords. A local attacker could exploit this to access user account data, potentially using it to gain full access to the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-2229

Affected Products

Windows Vista

Windows

References · 12

• http://securityfocus.com/archive/1/471947/100/0/threaded · Vendor Advisory
• http://secunia.com/advisories/25623 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2152 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2229 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2229 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 · Vendor Advisory
• http://securityfocus.com/bid/24411 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-032 · Note
• http://us-cert.gov/cas/techalerts/TA07-163A.html · Note
• http://osvdb.org/35344 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529 · Note
• http://securitytracker.com/id?1018225 · Note