NVD

Id
52825  
Name
CVE-2007-0603  
Description
PGP Desktop before 9.5.1 does not validate data objects received over the (1) pipepgpserv named pipe for PGPServ.exe or the (2) pipepgpsdkserv named pipe for PGPsdkServ.exe, which allows remote authenticated users to gain privileges by sending a data object representing an absolute pointer, which causes code execution at the corresponding address.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-30  
Modified Date
2011-03-07  
Seq
2007-0603  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266958 52825 CVE-2007-0603 20070125 Medium Risk Vulnerability in PGP Desktop  View
266959 52825 CVE-2007-0603 2203  View
266960 52825 CVE-2007-0603 1017563  View
266961 52825 CVE-2007-0603 VU#102465  View
266962 52825 CVE-2007-0603 http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-pgp-desktop/  View
266963 52825 CVE-2007-0603 20070125 Medium Risk Vulnerability in PGP Desktop  View
266964 52825 CVE-2007-0603 22247  View
266965 52825 CVE-2007-0603 ADV-2007-0356  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54602 JVNDB-2007-003294 PGP Desktop における権限を取得される脆弱性 PGP Desktop は、(1) PGPServ.exe に対する pipepgpserv 名前付きパイプ、または (2) PGPsdkServ.exe に対する pipepgpsdkserv 名前付きパイプを経由して受信したデータオブジェクトを検証しないため、権限を取得される脆弱性が存在します。 CVE-2007-0603 23958 CVE-2007-0603 52825 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003294.html 2007-01-30 2012-09-25 View