CVE-2019-12171: High severity dropbox vulnerability
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-12171.
What is the severity of CVE-2019-12171?
The severity of CVE-2019-12171 is high.
What software versions are affected by CVE-2019-12171?
The Dropbox desktop application version 71.4.108.0 is affected by CVE-2019-12171.
How does CVE-2019-12171 exploit the vulnerability?
CVE-2019-12171 exploits the vulnerability by storing cleartext credentials in memory upon successful login or new account creation and not securely freeing them in the running process.
Are there any references available for CVE-2019-12171?
Yes, you can find references for CVE-2019-12171 at the following links: - [Reference 1](https://drive.google.com/open?id=1DCGurwRTu0HsUpTglVR0jgItZNqqDm_5) - [Reference 2](https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8)