A remotely exploitable buffer overflow exists in the Network Associates PGP Outlook Plug-in.
As reported in eEye Digital Security Advisory AD20020710, a remotely exploitable buffer overflow exists in the PGP Outlook Plug-in. By sending a specially crafted message to a victim, an attacker can execute arbitrary code on the target system.
A remote attacker can execute arbitrary code on the target system with the privileges of the user running the PGP Outlook Plug-in. As a result, the attacker could do anything the victim could do, including reading sensitive data on the vulnerable system.
Apply the patch.
This vulnerability was discovered by eEye Digital Security.
This document was written by Ian A Finlay.
|Date First Published:||2002-07-11|
|Date Last Updated:||2002-07-11 17:29 UTC|