Описание
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
Ссылки
- PatchVendor Advisory
- US Government Resource
- PatchVendor Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:pgp:desktop_security:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*
EPSS
Процентиль: 79%
0.01316
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
EPSS
Процентиль: 79%
0.01316
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other