CVE-2002-1696 Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Alwa...
MediumCVSS 5.5
EPSS 0.25%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp personal privacy | = 7.0 | No fix listed |
| pgp personal privacy | = 7.0.3 | No fix listed |
| pgp personal privacy | = 7.0.4 | No fix listed |
References
- 20020108 PGP 7.0 Outlook Plug-in flaw broken-link mailing-list
- 3825 broken-link third-party-advisory vdb-entry
- pgp-outlook-decrypted-copy(7900) third-party-advisory vdb-entry