PT-2011-3058 · Trend Micro · Trend Micro Internet Security

Nobuhiro Tsuji · Published 2011-05-20 · Updated 2011-05-24 · CVE-2011-1327

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Security versions 2009

Description The issue concerns the Keystroke Encryption feature, which fails to completely encrypt passwords. This allows local users to obtain sensitive information by using a keylogger.

Recommendations For version 2009, consider disabling the Keystroke Encryption feature until a proper fix is available to prevent potential exploitation.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2011-1327

Affected Products

Trend Micro Internet Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-1327 · Security Note
• http://jvn.jp/en/jp/JVN99175647/index.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1327 · Note
• http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028 · Note