Description
The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.
References (3)
Core 3
Core References
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN99175647/index.html
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028
Various Sources x_refsource_confirm
http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx
Scores
EPSS
0.0005
EPSS Percentile
16.8%
Details
CWE
CWE-310
Status
published
Products (1)
trendmicro/trend_micro_internet_security
2009
Published
May 20, 2011
Tracked Since
Feb 18, 2026