PT-2002-1864 · Pgp · Pgp Corporate Desktop

Published 2002-10-04 · Updated 2017-10-10 · CVE-2002-0850

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PGP Corporate Desktop version 7.1.1

Description: A buffer overflow issue allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.

Recommendations: For PGP Corporate Desktop version 7.1.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-0850

Affected Products

Pgp Corporate Desktop

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-0850 · Security Note
• http://securityfocus.com/bid/5656 · Vendor Advisory
• http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt · Note
• http://xforce.iss.net/xforce/xfdb/10043 · Note
• http://marc.info/?l=bugtraq&m=103133995920090&w=2 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10043 · Note
• http://marc.theaimsgroup.com/?l=bugtraq&m=103133995920090&w=2 · Note