CVE-2007-5470

N/A Unknown

Published: October 16, 2007 Modified: April 23, 2026

Description

Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/38486

Source: cve@mitre.org

http://secunia.com/advisories/27144

Source: cve@mitre.org

Vendor Advisory

http://support.microsoft.com/kb/942109

Source: cve@mitre.org

http://www.securityfocus.com/bid/25996

Source: cve@mitre.org

http://osvdb.org/38486

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27144

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.microsoft.com/kb/942109

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25996

Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

2.0%

78th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-200 CWE-310

Affected Vendors

microsoft

Related CVEs