PT-2009-3314 · Pgp · Pgp Desktop

Nikita Tarakanov · Publicado 2009-04-15 · Atualizado 2018-10-10 · CVE-2009-0681

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PGP Desktop versions prior to 9.10

Description The issue allows local users to cause a denial of service by crashing the system via a crafted IOCTL request to pgpdisk.sys. Additionally, it enables local users to cause a denial of service and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.

Recommendations For versions prior to 9.10, update to version 9.10 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0681

Produtos afetados

Pgp Desktop

Referências · 6

• https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1 · Aviso do Fabricante
• http://en.securitylab.ru/lab/PT-2009-01 · Correção
• http://securitytracker.com/id?1022034 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0681 · Nota de Segurança
• http://securityfocus.com/archive/1/502633/100/0/threaded · Nota
• http://securitylab.ru/lab/PT-2009-01 · Nota