Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

CVE-2007-5470

Microsoft Expression Media stores the catalog password in cleartext inside the catalog IVC file, enabling local users to read sensitive credentials and access the catalog. The weakness stems from a design flaw in the catalog password-protection feature; exploitation details are not provided in th...