Shana Informed Information Disclosure Vulnerability

An information disclosure issue has been discovered in Shana Informed.

By opening encrypted documents created by Informed in a hex editor, it is potentially possible for an attacker to obtain sensitive information from the document, as well as arbitrary files located on the system.

It should be noted that documents created under on the Windows XP platform, are not vulnerable to this issue.


Privacy Statement
Copyright 2010, SecurityFocus