KLA10288 ACE vulnerability in PGP Desktop

An untrusted path vulnerability was found in PGP Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via a DLL hijack.

Original advisories

Related products

PGP-Desktop

CVE list

CVE-2010-3397 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• PGP Desktop version 9.9.0 build 397PGP Desktop 9.10 all versionsPGP Desktop version 10.0.0 build 2732