Description (CNA)
Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securitytracker.com/id?1014730
- http://antilamo.skifstone.com/vuln/whisper32.txt
- http://marc.info/?l=bugtraq&m=112438834310990&w=2
- http://www.securityfocus.com/bid/14600
ADP enrichment
No English description supplied.