PT-2007-2061 · Pgp · Pgp Desktop

Peter Winter-Smith · Publicado 2007-01-30 · Atualizado 2018-10-16 · CVE-2007-0603

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PGP Desktop versions prior to 9.5.1

Description The issue concerns the lack of validation for data objects received over specific named pipes, allowing remote authenticated users to gain privileges. This is achieved by sending a data object that represents an absolute pointer, leading to code execution at the corresponding address. The affected named pipes are related to PGPServ.exe and PGPsdkServ.exe.

Recommendations For versions prior to 9.5.1, update to version 9.5.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-0603

Produtos afetados

Pgp Desktop

Referências · 12

• http://securityfocus.com/bid/22247 · Nota
• http://ngssoftware.com/advisories/medium-risk-vulnerability-in-pgp-desktop · Aviso do Fabricante
• http://secunia.com/advisories/23938 · Aviso do Fabricante
• http://securityfocus.com/archive/1/458137/100/0/threaded · Nota
• http://osvdb.org/32969 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0025.html · Nota
• http://kb.cert.org/vuls/id/102465 · Nota
• http://vupen.com/english/advisories/2007/0356 · Nota
• http://securitytracker.com/id?1017563 · Nota
• http://securityreason.com/securityalert/2203 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0603 · Nota de Segurança
• http://osvdb.org/32970 · Nota