PT-2013-1997

CVE-2012-6533

·

Publicado

2013-02-18

·

Atualizado

2013-02-20

Descrição por

CVSS 2.0
4.4
Média
MétricasAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop version 10.3.0 before MP1
Description A buffer overflow issue exists in the pgpwded.sys component, allowing local users to gain privileges through a crafted application. This issue affects Windows XP and Server 2003 systems.
Recommendations For Symantec PGP Desktop versions 10.x, update to a version that includes the fix for this issue. For Symantec Encryption Desktop version 10.3.0, apply MP1 or a later patch to resolve the issue.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2012-6533
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com