CVE-2009-0681 | BDVDB-2026-36133 Detail

Description#

PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/502633/100/0/threaded
http://en.securitylab.ru/lab/PT-2009-01
https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1
http://www.securitytracker.com/id?1022034

Exploit#

No public exploit known

History#

Version 12009-04-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.