The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP...
Vulnerability Description
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5731
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securitytracker.com/id?1021493
- http://www.securityfocus.com/archive/1/499572/100/0/threaded
- http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php
- http://secunia.com/advisories/33310
- https://www.exploit-db.com/exploits/7556
- http://www.securityfocus.com/bid/32991
- http://securityreason.com/securityalert/4811
- http://osvdb.org/50914
- http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.php
More from pgp
View All →Affected Vendor
Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.