Pgp Desktop vulnerabilities
4 known vulnerabilities affecting pgp/desktop.
Total CVEs
4
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2010-3397P3CRITICALCVSS 9.3v9.9.0v9.10.0+1 more2010-09-15
CVE-2010-3397 [CRITICAL] CVE-2010-3397: Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and p
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the same folder as a .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd
nvd
CVE-2008-5731P4MEDIUMCVSS 4.9PoCv9.0.6v9.9.02008-12-26
CVE-2008-5731 [MEDIUM] CWE-399 CVE-2008-5731: The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtai
nvd
CVE-2009-0681P4HIGHCVSS 7.2≤ 9.9.0v8.0+2 more2009-04-15
CVE-2009-0681 [HIGH] CWE-20 CVE-2009-0681: PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IO
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.
nvd
CVE-2005-4151P4LOWCVSS 2.1≤ 9.0.3_build_2932v8.0+1 more2005-12-10
CVE-2005-4151 [LOW] CVE-2005-4151: The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and ea
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
nvd