CVE-2009-0681: Input Validation
PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0681?
CVE-2009-0681 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2009-0681?
To mitigate CVE-2009-0681, users should upgrade to PGP Desktop version 9.10 or later.
What systems are affected by CVE-2009-0681?
CVE-2009-0681 affects PGP Desktop versions prior to 9.10, including 8.0 and 9.0 releases.
What types of attacks are possible with CVE-2009-0681?
CVE-2009-0681 allows local users to crash the system or execute arbitrary code using crafted IOCTL requests.
Is there a workaround for CVE-2009-0681?
No formal workaround for CVE-2009-0681 is available, and the best course of action is to upgrade to a patched version.