CVE-2008-3897: Infoleak
DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3897?
CVE-2008-3897 is classified as a medium severity vulnerability due to its potential exposure of sensitive authentication information.
How do I fix CVE-2008-3897?
To fix CVE-2008-3897, users should upgrade to a later version of DiskCryptor that addresses the vulnerability.
Who is affected by CVE-2008-3897?
CVE-2008-3897 affects users of DiskCryptor version 0.2.6 on Windows operating systems.
What information is at risk due to CVE-2008-3897?
CVE-2008-3897 puts pre-boot authentication passwords at risk, allowing local users to extract them from memory.
Can CVE-2008-3897 be exploited remotely?
CVE-2008-3897 cannot be exploited remotely as it requires local access to the affected system.