Description
The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin 2009) does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger.
References
- JVN#99175647 third-party-advisory
- JVNDB-2011-000028 third-party-advisory
- http://esupport.trendmicro.co.jp/Pages/JP-2079186.aspx