Pgp
23 CVEs in 14 Pgp products, including Pgp, Corporate Desktop, Desktop. Newest: CVE-2010-3618 (2010-11-22). Severity, EPSS and public exploits for each.
Pgp products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2010-3618 | | 2010-11-22 | PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi… | |
CVE-2010-3397 | | 2010-09-15 | Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly rem… | |
CVE-2009-0681 | | 2009-04-15 | PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of servi… | |
CVE-2008-5731 | | 2008-12-26 | The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service… | |
CVE-2007-0603 | | 2007-01-30 | PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe f… | |
CVE-2005-4151 | | 2005-12-10 | The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster f… | |
CVE-2002-2069 | High | 7.5 | 2002-12-31 | PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive info… |
CVE-2002-1977 | | 2002-12-31 | Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypt… | |
CVE-2002-1696 | Medium | 5.5 | 2002-12-31 | Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when o… |
CVE-2002-0850 | | 2002-10-04 | Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is… | |
CVE-2002-0788 | Medium | 5.5 | 2002-08-12 | An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files th… |
CVE-2002-0685 | | 2002-07-23 | Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Securi… | |
CVE-2001-1252 | | 2001-09-28 | Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access… | |
CVE-2001-1456 | | 2001-09-04 | Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a craft… | |
CVE-2001-1016 | | 2001-09-04 | PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invali… | |
CVE-2001-1320 | | 2001-07-16 | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encod… | |
CVE-2001-0435 | | 2001-07-02 | The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option a… | |
CVE-2001-0381 | | 2001-06-27 | The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted privat… | |
CVE-2001-0265 | | 2001-06-18 | ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file. | |
CVE-2000-0802 | | 2000-10-20 | The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by mod… | |
CVE-2000-0678 | | 2000-10-20 | PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an… | |
CVE-2000-0543 | | 2000-06-14 | The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS… | |
CVE-2000-0445 | | 2000-05-24 | The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable ke… |