Code injection

The Keystroke Encryption feature in Trend Micro Internet Security 2009 aka Virus Buster 2009 and PC-cillin 2009 does not completely encrypt passwords, which allows local users to obtain sensitive information by leveraging a keylogger...

CVE-2011-1327

The vulnerability CVE-2011-1327 affects Trend Micro Internet Security 2009 (Virus Buster 2009 / PC-cillin 2009). The key input encryption function does not completely encrypt passwords, allowing local users with access to the system to potentially obtain sensitive information via a keylogger. The...

CVE-2009-0850

BitDefender Internet Security 2009 is vulnerable to a cross-site scripting (XSS) flaw in the way it handles filenames inside virus-infected archive files (RAR/ZIP). This user-assisted exploit can inject arbitrary web script or HTML via the archive filename, as described for CVE-2009-0850. The vul...