CVE-2010-3397 - CVE House
Back to Database
Status published Critical CVE-2010-3397

Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397,...

Vulnerability Description

Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the same folder as a .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd, or .skr file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3397

Credits & Attribution

No credits recorded in the NVD database.

References

More from pgp

View All →
CVE-2010-3618
PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0...
Medium 4.3
CVE-2009-0681
PGP Desktop before 9.10 allows local users to (1) cause...
High 7.2
CVE-2008-5731
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP...
Medium 4.9
CVE-2007-0603
PGP Desktop before 9.5.1 does not validate data objects received...
High 7.1
CVE-2005-4151
The Wipe Free Space utility in PGP Desktop Home 8.0...
Low 2.1

Affected Vendor

Affected Software

desktop
Vulnerable Versions:
9.9.0, 9.10.0, 10.0.0

Timeline

Official Publish: September 15th, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.