Unscored severity · published Dec 26, 2008
CVE-2008-5731
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Desktop · Pgp
9.0.6; 9.9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5731
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5731
osvdb.org
http://osvdb.org/50914
Vendor Advisory
http://secunia.com/advisories/33310
securityreason.com
http://securityreason.com/securityalert/4811
www.evilfingers.com
http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.php
Exploit
http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/499572/100/0/threaded
More from Desktop
–
CVE-2010-3397
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to…
–
CVE-2009-0681
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and…
–
CVE-2005-4151
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which…