PT-2008-5228 · Microsoft · Windows Vista

Published 2008-09-03 · Updated 2025-04-03 · CVE-2008-3893

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Vista versions prior to SP1

Description The issue allows local users to obtain sensitive information by reading physical memory locations associated with the BIOS Keyboard buffer, which stores pre-boot authentication passwords. This occurs because the buffer is not cleared during boot.

Recommendations For Windows Vista versions prior to SP1, apply Service Pack 1 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-3893

Affected Products

Windows Vista

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-3893 · Security Note
• http://secunia.com/advisories/31619 · Vendor Advisory
• http://ivizsecurity.com/security-advisory-iviz-sr-0801.html · Note
• https://t.me/cvenotify/117563 · Telegram Post