Win32: Postmessage API security flaw

Hello, I would like to bring to your notice a certain vulnerability that has existed in Win 9x platforms for many years and now in Win2k/XP. Most of us our familiar with password revealers and password stealing trojans. Though flaws in Windows Messaging API have been show before this one relates ...

WIN32 PostMessage API information leak

By using PostMessagehwnd, EMSETPASSWORDCHAR, 0, 0 it's possible to unmask password in dialog to copy it later via buffer. It alows to bypass WMGETTEXT protection...