Unscored severity · published Jul 23, 2002
CVE-2002-0685
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Desktop Security · Pgp
7.0.4 · source: NVD
FR
Freeware · Pgp
7.0.3 · source: NVD
PS
Personal Security · Pgp
7.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0685
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0685
Patch
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.04/hotfix/ReadMe.txt
marc.info
http://marc.info/?l=bugtraq&m=102634756815773&w=2
marc.info
http://marc.info/?l=ntbugtraq&m=102639521518942&w=2
www.iss.net
http://www.iss.net/security_center/static/9525.php
US Government Resource
http://www.kb.cert.org/vuls/id/821139
www.osvdb.org
http://www.osvdb.org/4364