WIN32 PostMessage API information leak

By using PostMessagehwnd, EMSETPASSWORDCHAR, 0, 0 it's possible to unmask password in dialog to copy it later via buffer. It alows to bypass WMGETTEXT protection...

Win32: Postmessage API security flaw

Hello, I would like to bring to your notice a certain vulnerability that has existed in Win 9x platforms for many years and now in Win2k/XP. Most of us our familiar with password revealers and password stealing trojans. Though flaws in Windows Messaging API have been show before this one relates ...