CVE-2002-0685 Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remo...
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp desktop security | = 7.0.4 | No fix listed |
| pgp freeware | = 7.0.3 | No fix listed |
| pgp personal security | = 7.0.3 | No fix listed |
References
- download.nai.com patch vendor-advisory
- 20020710 EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability mailing-list
- 20020710 EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability mailing-list
- pgp-outlook-heap-overflow(9525) vdb-entry
- VU#821139 third-party-advisory us-government-resource
- 4364 vdb-entry
- 5202 vdb-entry