Vulnerabilities > CVE-2005-2664 - Unspecified vulnerability in Whisper32 1.16
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- http://antilamo.skifstone.com/vuln/whisper32.txt
- http://antilamo.skifstone.com/vuln/whisper32.txt
- http://marc.info/?l=bugtraq&m=112438834310990&w=2
- http://marc.info/?l=bugtraq&m=112438834310990&w=2
- http://securitytracker.com/id?1014730
- http://securitytracker.com/id?1014730
- http://www.securityfocus.com/bid/14600
- http://www.securityfocus.com/bid/14600