PT-2013-1667

CVE-2012-4351

·

Published

2013-02-18

·

Updated

2013-02-18

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop version 10.3.0 before MP1
Description The issue is related to an integer overflow in the pgpwded.sys component. This allows local users to gain privileges via a crafted application.
Recommendations For Symantec PGP Desktop versions 10.x, update to a version that addresses the integer overflow issue in pgpwded.sys. For Symantec Encryption Desktop version 10.3.0 before MP1, apply the MP1 patch to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾