Detections
Analytics
CVE-2019-12171
high
Description
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process.
References
https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8
https://drive.google.com/open?id=1DCGurwRTu0HsUpTglVR0jgItZNqqDm_5