CVEvulnerability
CVE-2007-5470
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-10-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200, CWE-310
Description
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
Affected configurations
• microsoft expression media
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://osvdb.org/38486 osvdb.org
- http://secunia.com/advisories/27144 Vendor Advisory
- http://support.microsoft.com/kb/942109 support.microsoft.com
- http://www.securityfocus.com/bid/25996 www.securityfocus.com
- http://osvdb.org/38486 osvdb.org
- http://secunia.com/advisories/27144 Vendor Advisory
- http://support.microsoft.com/kb/942109 support.microsoft.com
- http://www.securityfocus.com/bid/25996 www.securityfocus.com