Integer overflow

Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application...

CVE-2012-6533

CVE-2012-6533 is a buffer overflow in Symantec PGP Desktop/Encryption Desktop’s kernel driver pgpwded.sys. Affects Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP/Server 2003, enabling local privilege escalation via a crafted application. CVSSv2 base score 4.4 (lo...

CVE-2012-4351: Undefined Security Weakness

Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application...

Symantec Encryption Desktop Local Access Elevation of Privilege

SUMMARY Symantec's PGP Desktop and Encryption Desktop system kernel driver is susceptible to a local access integer overflow on all versions of Microsoft Windows operating systems. The driver is also susceptible to a local buffer overflow only on Microsoft Windows XP and Windows Server 2003...

Symantec Encryption Desktop 10 - Local Buffer Overflow / Local Privilege Escalation

source: https://www.securityfocus.com/bid/57835/info Symantec Encryption Desktop is prone to a local buffer-overflow vulnerability. A local attacker may exploit this issue to execute arbitrary code with escalated privileges. define IOCONTROLVULN 0x80022058 define TARGETDEVICE L"\Device\pgpwdef"...

Symantec PGP/Encryption Desktop Detection (Windows SMB Login)

Detects the installed version of Symantec PGP/Encryption Desktop on Windows. The script logs in via smb, search for the product name in the registry, gets version from the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PGP Desktop PGPserv Crafted Data Object Arbitrary Code Execution

The version of PGP Desktop installed on the remote host reportedly can allow a remote, authenticated user to execute arbitrary code on the affected host with LOCAL SYSTEM privileges. The issue arises because the software operates a service named 'PGPServ' or 'PGPsdkServ' that exposes a named pipe...