CVE-2007-0843
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does...
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
Exploit likelihood
What each source reports
NVD Score used
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
- Record
CVE-2007-0843- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
- Record
CVE-2007-0843- Updated
- 2026-11-02
EUVDEUVD-2007-0840 No score
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
- Record
EUVD-2007-0840- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwhq-68gv-8x93 No score
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does...
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
- Record
GHSA-gwhq-68gv-8x93- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows XP/2003 - ReadDirectoryChangesW Information Disclosure | 2007-02-22 |
| PoC in GitHub | z3APA3A/spydir | 2014-11-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0843 is a medium vulnerability (CVSS 4.6) in Microsoft Windows 2000, published February 23, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.72%, the 89th percentile. No source names a fixed version.
References
securityfocus.com/bid/22664
securityvulns.com/advisories/readdirectorychanges.asp
lists.grok.org.uk/pipermail/full-disclosure/2007-February/052613.html
secunia.com/advisories/24245
vupen.com/english/advisories/2007/0701
Show 7 moreShow less
osvdb.org/33474
exchange.xforce.ibmcloud.com/vulnerabilities/32644
securityreason.com/securityalert/2282
packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html
nvd.nist.gov/vuln/detail/CVE-2007-0843
github.com/advisories/GHSA-gwhq-68gv-8x93