« Volver al listado

CVE-2007-4785

Estado: ModificadaMedia (6.8)—

Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sony — Micro Vault Fingerprint Access Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4785",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-09-10T21:17:00.000",
  "references": [
    {
      "url": "http://hiltont.blogspot.com/2007/08/sony-rootkit-version-2.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://observed.de/?entnum=101",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3118",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.computerdefense.org/?p=380",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.f-secure.com/weblog/archives/archive-082007.html#00001263",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.f-secure.com/weblog/archives/archive-082007.html#00001266",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478149/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478315/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478357/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478365/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://hiltont.blogspot.com/2007/08/sony-rootkit-version-2.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://observed.de/?entnum=101",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/3118",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.computerdefense.org/?p=380",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.f-secure.com/weblog/archives/archive-082007.html#00001263",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.f-secure.com/weblog/archives/archive-082007.html#00001266",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478149/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478315/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478357/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/478365/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory."
    },
    {
      "lang": "es",
      "value": "Sony Micro Vault Fingerprint Access Software,  distribuido con los dispositivos flash Sony Micro Vault USM-F USB, instala un controlado que esconde un directorio bajo %WINDIR% lo cual podría permitir a un atacante remoto evitar la detección de código malicioso a través de la colocación de archivos en este directorio."
    }
  ],
  "lastModified": "2026-06-16T22:44:47.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sony:micro_vault_fingerprint_access_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77613B75-4462-43E9-8B08-54235E293C3D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}