CVE-2009-0681

Related Files

PGP Desktop Pgpdisk.sys / Pgpwded.sys Vulnerabilities

Posted Apr 14, 2009

Authored by Nikita Tarakanov | Site securitylab.ru

Positive Technologies Research Team has discovered several vulnerabilities in PGP Desktop version 9.9.0 build 397.The IOCTL handler in pgpdisk.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. The IOCTL handler in pgpwded.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system or execute arbitrary code with SYSTEM privileges.

tags | advisory, arbitrary, local, vulnerability

advisories | CVE-2009-0681

SHA-256 | fd5eb6e092f6ede62acc2131f53c5d1028be46e09b1d5723579e413840eb7309

Download | Favorite | View