CVE-2011-1327: The Keystroke Encryption feature in Trend Micro Internet Security 2009 (aka Virus Buster 2009 and PC-cillin...

Security readout for executives and security teams

This issue weakens a password-protection feature in Trend Micro Internet Security 2009. The feature was meant to protect keystrokes, but passwords may not be fully encrypted, allowing sensitive information exposure on an already-accessible local system. The source bundle does not confirm active exploitation or exact fixed versions. Exposure appears limited to endpoints still running Trend Micro Internet Security 2009 or its named regional aliases with the Keystroke Encryption feature present. Current exposure is likely uncommon but should be checked in legacy environments. Treat this as a legacy exposure issue, not an internet-wide emergency. Priority rises if old Trend Micro 2009 products remain on systems that process privileged or sensitive credentials. Mitigation focus: Check Trend Micro guidance for affected builds and fixed versions.; Retire or replace any remaining 2009 installations with supported security software.; Do not rely on this feature as a compensating password-control measure..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.