PT-2013-1997

CVE-2012-6533

·

Published

2013-02-18

·

Updated

2013-02-20

Description by

CVSS 2.0
4.4
Medium
MetricsAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop version 10.3.0 before MP1
Description A buffer overflow issue exists in the pgpwded.sys component, allowing local users to gain privileges through a crafted application. This issue affects Windows XP and Server 2003 systems.
Recommendations For Symantec PGP Desktop versions 10.x, update to a version that includes the fix for this issue. For Symantec Encryption Desktop version 10.3.0, apply MP1 or a later patch to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2012-6533
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com