CVE-2007-0603 in PGP Desktop

Sumário (Inglês)

PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe, which allows remote authenticated users to gain privileges by sending a data object representing an absolute pointer, which causes code execution at the corresponding address.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

30/01/2007

Divulgação

30/01/2007

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
85133	PGP Desktop PGPServ.exe Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2007-0603
2885	PGP Corporate Desktop RPC Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2007-0603

Fontes

• MITRE
• NVD
• CVE Details