Home / Vulnerability Database / VB.NET : Privacy violation (Unmanaged memory usage)
VB.NET

VB.NET : Privacy violation (Unmanaged memory usage)

Overview

The content of the String object can not be deleted from memory by the software. Valuable data leak is possible.

If valuable data (passwords, credit card numbers, etc.) is not deleted from memory immediately after use, leak is possible. String objects are immutable; their values can only be removed by the garbage collector. The garbage collector does not run until the virtual machine runs out of memory. Memory dump created in the case of process emergency stop may contain confidential information.

It is important to note that classes from System.Web.UI.WebControls are also affected by this vulnerability.

MEDIUM

DerScanner Severity Score

Do you want to fix VB.NET : Privacy violation (Unmanaged memory usage) in your application?

See also

VB.NET

VB.NET : Weak hashing algorithm

VB.NET

VB.NET : Debug code

VB.NET

VB.NET : Explicit garbage collection