CVE-2007-2229

Description

Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032

http://www.vupen.com/english/advisories/2007/2152

http://www.us-cert.gov/cas/techalerts/TA07-163A.html

http://www.securitytracker.com/id?1018225

http://www.securityfocus.com/bid/24411

http://www.securityfocus.com/archive/1/471947/100/0/threaded

http://secunia.com/advisories/25623

http://osvdb.org/35344

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3