CVE-2011-1327

The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.

Score

CVSS 2.0 2.1 Low

Status

Modified - vultures@jpcert.or.jp

Published

2011-05-20

Last modified

2024-09-17

Weaknesses

CWE-310

Affected products

• Trend Micro Internet Security (Trendmicro)

References

• http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx
• http://jvn.jp/en/jp/JVN99175647/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000028