PT-2013-1997 · Symantec+1 · Symantec Encryption Desktop+3

Publicado 2013-02-18 · Atualizado 2013-02-20 · CVE-2012-6533

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop version 10.3.0 before MP1

Description A buffer overflow issue exists in the pgpwded.sys component, allowing local users to gain privileges through a crafted application. This issue affects Windows XP and Server 2003 systems.

Recommendations For Symantec PGP Desktop versions 10.x, update to a version that includes the fix for this issue. For Symantec Encryption Desktop version 10.3.0, apply MP1 or a later patch to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-6533

Produtos afetados

Symantec Encryption Desktop

Symantec Pgp Desktop

Windows Server 2003

Windows Xp

Referências · 4

• 🔥 https://exploit-db.com/exploits/38299 · Exploit
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2013&suid=20130213_00 · Aviso do Fabricante
• http://securityfocus.com/bid/57835 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6533 · Nota de Segurança