Executive Summary
| Summary | |
|---|---|
| Title | Vulnerability in Windows Vista Could Allow Information Disclosure (931213) |
| Informations | |||
|---|---|---|---|
| Name | MS07-032 | First vendor Publication | 2007-06-12 |
| Vendor | Microsoft | Last vendor Modification | 2007-06-12 |
| Severity (Vendor) | Moderate | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| This moderate security update resolves a privately reported vulnerability. This vulnerability could allow non-privileged users to access local user information data stores including administrative passwords contained within the registry and local file system. |
Original Source
| Url : http://www.microsoft.com/technet/security/bulletin/ms07-032.mspx?pubDate=2 (...) |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1529 | |||
| Oval ID: | oval:org.mitre.oval:def:1529 | ||
| Title: | Windows Vista Information Disclosure Vulnerability | ||
| Description: | Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2007-2229 | Version: | 8 |
| Platform(s): | Microsoft Windows Vista | Product(s): | |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 2 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-01-14 | Name : Microsoft Windows Vista Information Disclosure Vulnerability (931213) File : nvt/gb_ms07-032.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 35344 | Microsoft Windows Vista Local User Information Data Stores Information Disclo... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-06-12 | Name : A local user can access sensitive information. File : smb_nt_ms07-032.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:45:42 |
|
