Webroot Software Window Washer Data Exposure Vulnerability

Bugtraq ID:	11054
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 26 2004 12:00AM
Updated:	Aug 26 2004 12:00AM
Credit:	Discovery is credited to First Last.
Vulnerable:	Webroot Window Washer 5.5
Not Vulnerable:

Webroot Software Window Washer Data Exposure Vulnerability

Window Washer is reported prone to a data exposure vulnerability. It is reported that the 'Add Bleach to Wash' setting allows users to delete files securely by writing random data to the drive repreatedly. Due to an unspecified design error, this feature does not work properly and may allow a local attacker to expose data that was deleted by the application.

Window Washer version 5.5 is reportedly affected by this issue. Other versions may be affected as well.

Webroot Software Window Washer Data Exposure Vulnerability

No exploit is required.

Webroot Software Window Washer Data Exposure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Webroot Software Window Washer Data Exposure Vulnerability

References:

• Window Washer Product Page (Webroot Software)