CVE-2002-0685: Buffer Overflow
Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0685?
CVE-2002-0685 is classified as a high severity vulnerability due to its potential to allow remote attackers to gain privileges via heap-based buffer overflow.
How do I fix CVE-2002-0685?
To fix CVE-2002-0685, users should upgrade to the latest version of PGP Desktop Security or apply any available patches from the vendor.
Which software is affected by CVE-2002-0685?
CVE-2002-0685 affects PGP Desktop Security version 7.0.4 and PGP Personal Security and Freeware versions 7.0.3.
What type of vulnerability is CVE-2002-0685?
CVE-2002-0685 is a heap-based buffer overflow vulnerability related to message decoding in PGP Outlook Encryption Plug-In.
Can CVE-2002-0685 be exploited remotely?
Yes, CVE-2002-0685 can be exploited remotely by sending a large, malformed mail message to the affected software.