CVE-2008-5731: Medium severity PGP Desktop vulnerability
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHODBUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5731?
CVE-2008-5731 has been assessed to have a medium severity due to its potential to cause system crashes and privilege escalation.
How do I fix CVE-2008-5731?
To fix CVE-2008-5731, update to the latest version of PGP Desktop that does not contain this vulnerability.
What systems are affected by CVE-2008-5731?
CVE-2008-5731 affects PGP Desktop versions 9.0.6 build 6060 and 9.9.0 build 397.
What type of vulnerability is CVE-2008-5731?
CVE-2008-5731 is classified as a denial of service vulnerability that can lead to system crashes.
Can CVE-2008-5731 allow unauthorized access?
Yes, CVE-2008-5731 could potentially allow local users to gain higher privileges on the system.