CVE-2012-4351 Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.
MediumCVSS 6.9
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec encryption desktop | = 10.3.0 | No fix listed |
| symantec pgp desktop | = 10.0.0 | No fix listed |
| symantec pgp desktop | = 10.0.1 | No fix listed |
| symantec pgp desktop | = 10.0.2 | No fix listed |
| symantec pgp desktop | = 10.0.3 | No fix listed |
| symantec pgp desktop | = 10.1.0 | No fix listed |
| symantec pgp desktop | = 10.1.1 | No fix listed |
| symantec pgp desktop | = 10.1.2 | No fix listed |
| symantec pgp desktop | = 10.2.0 | No fix listed |
| symantec pgp desktop | = 10.2.1 | No fix listed |
References
- 57170 vdb-entry
- www.symantec.com vendor-advisory