PT-2011-3058 · Trend Micro · Trend Micro Internet Security

Nobuhiro Tsuji · Publicado 2011-05-20 · Atualizado 2011-05-24 · CVE-2011-1327

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Security versions 2009

Description The issue concerns the Keystroke Encryption feature, which fails to completely encrypt passwords. This allows local users to obtain sensitive information by using a keylogger.

Recommendations For version 2009, consider disabling the Keystroke Encryption feature until a proper fix is available to prevent potential exploitation.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2011-1327

Produtos afetados

Trend Micro Internet Security

Referências · 5

• http://jvn.jp/en/jp/JVN99175647/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1327 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1327 · Nota
• http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028 · Nota