Unscored severity · published Sep 15, 2010
CVE-2010-3397
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the same folder as a .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd, or .skr file.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Desktop · Pgp
9.9.0; 9.10.0; 10.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3397
Vendor Advisory
http://secunia.com/advisories/41135
www.securityfocus.com
http://www.securityfocus.com/archive/1/513596/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/42856
More from Desktop
–
CVE-2009-0681
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and…
–
CVE-2008-5731
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and…
–
CVE-2005-4151
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which…