← Back to CVEs
CVE-2007-2229
N/ADescription
Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability."
CVE Details
CVSS v3.1 ScoreN/A
Published6/12/2007
Last Modified4/23/2026
Sourcenvd
Honeypot Sightings0
Affected Products
microsoft:windows_vista
Weaknesses (CWE)
CWE-264
References
http://osvdb.org/35344(secure@microsoft.com)
http://secunia.com/advisories/25623(secure@microsoft.com)
http://www.securityfocus.com/archive/1/471947/100/0/threaded(secure@microsoft.com)
http://www.securityfocus.com/bid/24411(secure@microsoft.com)
http://www.securitytracker.com/id?1018225(secure@microsoft.com)
http://www.us-cert.gov/cas/techalerts/TA07-163A.html(secure@microsoft.com)
http://www.vupen.com/english/advisories/2007/2152(secure@microsoft.com)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032(secure@microsoft.com)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529(secure@microsoft.com)
http://osvdb.org/35344(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25623(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/471947/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/24411(af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1018225(af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA07-163A.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/2152(af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.