Vulnerability Details : CVE-2007-0843

The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.

Published 2007-02-23 02:28:00

Updated 2021-08-09 16:15:07

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-0843

Probability of exploitation activity in the next 30 days: 0.05%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 13 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-0843

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	[email protected]
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2007-0843

CWE-264

Assigned by: [email protected] (Primary)

References for CVE-2007-0843

Products affected by CVE-2007-0843

Microsoft » Windows 2000
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Professional Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:professional:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Home Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update Gold
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Media Center Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP2 Media Center Edition
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Embedded Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Tablet Pc Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Home Edition
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP2 Professional Edition
cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 64-bit 2003 Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit_2003:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP2 Home Edition
cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP2 Tablet Pc Edition
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server
cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Update Beta1
cpe:2.3:o:microsoft:windows_vista:*:beta1:*:*:*:*:*:*
Matching versions