Icon of program: Windows Me Exposed Passwo…

Windows Me Exposed Passwords in Compressed Files Vulnerability Patch

Download now

Used Windows Me Exposed Passwords in Compressed Files Vulnerability Patch for Windows?

Editors’ Review

Download.com staff
This patch addresses a critical security flaw in Windows Me's Compressed Folders feature, preventing sensitive password data from being exposed.

  • Pros

    • Fixes vulnerability allowing password recovery
    • Prevents future password storage in logs
    • Improves security for compressed folders

  • Cons

    • Requires manual deletion of existing log file
    • Only addresses a specific vulnerability
Icon of program: Windows Me Exposed Passwo…

Windows Me Exposed Passwords in Compressed Files Vulnerability Patch

Download now

Used Windows Me Exposed Passwords in Compressed Files Vulnerability Patch for Windows?

Explore More

Full Specifications

GENERAL
Release
Latest update
Version
ms01-019-3-28-01
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows 10
  • Windows ME
Additional Requirements
Windows Me
POPULARITY
Total Downloads
20,828
Downloads Last Week
1
Report Software

Program available in other languages

Last Updated

User Reviews

2.8/5

4 User Votes

Developer’s Description

By Microsoft
Patch a security vulnerability in Windows Me allowing data-compression passwords to be recovered.
Windows Me contains a data-compression feature called Compressed Folders. For interoperability with leading third-party compression tools, it provides a password-protection option for folders that have been compressed. However, due to a flaw in the package's implementation, the passwords used to protect the folders are recorded in a file on the user's system. If an attacker gained access to an affected machine on which password-protected folders were stored, she could learn the passwords and access the files.

The patch will prevent passwords from being written to the user's system in the future. However, as discussed in the FAQ, after applying the patch, it is important to also delete c:windowsdynazip.log to ensure that all previously-recorded passwords are deleted.

Download.com
Your review for Windows Me Exposed Passwords in Compressed Files Vulnerability Patch