CVEvulnerability
CVE-2007-2229
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability."
Affected configurations
• microsoft windows vista
Related
Weakness · not in database (1)
References
- http://osvdb.org/35344 osvdb.org
- http://secunia.com/advisories/25623 Vendor Advisory
- http://www.securityfocus.com/archive/1/471947/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24411 www.securityfocus.com
- http://www.securitytracker.com/id?1018225 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2152 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529 oval.cisecurity.org
- http://osvdb.org/35344 osvdb.org
- http://secunia.com/advisories/25623 Vendor Advisory
- http://www.securityfocus.com/archive/1/471947/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24411 www.securityfocus.com
- http://www.securitytracker.com/id?1018225 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2152 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529 oval.cisecurity.org