KeePass / Bugs / #1580 SECURITY - Copy/Paste Bug in Windows 10 after copy and paste of password into web browser and quit KeePass, still available in memory

#1580 SECURITY - Copy/Paste Bug in Windows 10 after copy and paste of password into web browser and quit KeePass, still available in memory

Milestone: KeePass_2.x

Status: closed

Owner: nobody

Labels: Security (6) Windows10 (1) copy-paste (2) Password (2)

Priority: 5

Updated: 2016-11-12

Created: 2016-10-28

Creator: zero-rate

Private: No

This bug is confirmed by me in Windows 10 (Version 1511; Build 10586.633) using Keepas 2.33.

After copy and paste from password field (Edit Entry Dialog box) using key combination Ctrl-C into Chrome web browser via Ctrl-V, Exit KeepPass, password is still resident in clipboard manager as evidenced by Ctrl-V of password into notepad (text document).
Once exited from Keepass, memory dump should occurr deleting password field contents from Ctrl-C key combination.

Zanaris.Falado@gmail.com

Discussion

zero-rate - 2016-10-28

Keepass has a bug

Last edit: zero-rate 2016-10-28

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Paul - 2016-10-28

You must have something that prevents KeePass clearing the clipboard.
I would use drag n drop instead, then no clipboard is involved.

cheers, Paul

p.s. It's not a good idea to post your email address in a public forum, unless you want lots of spam.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- zero-rate - 2016-10-28
  
  Yeah, I thought about that. I reinstalled Window10 (hardware + VM) ~ clean install and same problem. There is definitely a bug in Keepass.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Paul - 2016-10-28

Nope. it's not KeePass preventing the clipboard clear.
KeePass attempts to clear the clipboard by writing a new value and then clearing the buffer. If that doesn't work it's because the buffer is being retained externally.

Stick to DnD or Auto-Type.

cheers, Paul

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

zero-rate - 2016-10-28

Okay. I'm just letting you know about it. Whether or not you want to do anything about it is up to you. Thanks.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ryan Steed - 2016-10-30

FYI, I cannot re-produce this problem using KeePass 2.34 with Windows 10 Version 1607 (OS Build 14393).

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dominik Reichl - 2016-11-12

status: open --> closed

Priority: 1 --> 5
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dominik Reichl - 2016-11-12

Not a bug; see the FAQ:
http://keepass.info/help/kb/faq.html#clipovr

Thanks and best regards,
Dominik

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.