Unscored severity · published Apr 15, 2009
CVE-2009-0681
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Desktop · Pgp
through 9.9.0; through 9.9.0; 8.0; 8.0; 9.0; 9.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0681
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0681
Patch
http://en.securitylab.ru/lab/PT-2009-01
www.securityfocus.com
http://www.securityfocus.com/archive/1/502633/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1022034
Vendor Advisory
https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1
More from Desktop
–
CVE-2010-3397
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to…
–
CVE-2008-5731
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and…
–
CVE-2005-4151
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which…