PT-2013-1997 · Symantec+1 · Symantec Encryption Desktop+3

Published 2013-02-18 · Updated 2013-02-20 · CVE-2012-6533

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop version 10.3.0 before MP1

Description A buffer overflow issue exists in the pgpwded.sys component, allowing local users to gain privileges through a crafted application. This issue affects Windows XP and Server 2003 systems.

Recommendations For Symantec PGP Desktop versions 10.x, update to a version that includes the fix for this issue. For Symantec Encryption Desktop version 10.3.0, apply MP1 or a later patch to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-6533

Affected Products

Symantec Encryption Desktop

Symantec Pgp Desktop

Windows Server 2003

Windows Xp

References · 4

• 🔥 https://exploit-db.com/exploits/38299 · Exploit
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2013&suid=20130213_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6533 · Security Note
• http://securityfocus.com/bid/57835 · Note