Unscored severity · published Oct 4, 2002
CVE-2002-0850
Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted
–
CVSS
3.2%
EPSS
No
On KEV
Description
Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Corporate Desktop · Pgp
7.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0850
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0850
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html
download.nai.com
http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt
marc.info
http://marc.info/?l=bugtraq&m=103133995920090&w=2
Patch
http://www.securityfocus.com/bid/5656
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/10043
More from Corporate Desktop
5.5
CVE-2002-0788
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped…
–
CVE-2007-0603
PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe,…
–
CVE-2001-1016
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used…