Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-3893
microsoft
bitlocker
windows vista
sp1
vulnerability
bios
pre-boot authentication
sensitive information
memory locations
nvd
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Affected configurations
Node
microsoftwindows_vistaenterprise
ORmicrosoftwindows_vistaultimate
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_vista | microsoft windows vista | eq | * |
Related
nvd
nvd
CVE-2008-3893
2008-09-03 14:12:00
prion
prion
Buffer overflow
2008-09-03 14:12:00
cvelist
cvelist
CVE-2008-3893
2022-10-03 16:13:41
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Related for CVE-2008-3893