PT-2010-4788 · Pgp · Pgp Desktop

Published 2010-09-15 · Updated 2018-10-10 · CVE-2010-3397

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PGP Desktop versions 9.9.0 Build 397 through 10.0.0 Build 2732 PGP Desktop version 9.10.x

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse tsp.dll or tvttsp.dll located in the same folder as certain files, including .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd, or .skr files.

Recommendations For PGP Desktop versions 9.9.0 Build 397 through 10.0.0 Build 2732, consider restricting access to the affected file types until a patch is available. For PGP Desktop version 9.10.x, avoid using the software with untrusted search paths to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of tsp.dll and tvttsp.dll files in the affected software until a patch is available.

Fix

Related Identifiers

CVE-2010-3397

Affected Products

Pgp Desktop

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-3397 · Security Note
• http://secunia.com/advisories/41135 · Vendor Advisory
• http://securityfocus.com/bid/42856 · Note
• http://securityfocus.com/archive/1/513596/100/0/threaded · Note