Overview
A remotely exploitable buffer overflow exists in the Network Associates PGP Outlook Plug-in.
Description
As reported in eEye Digital Security Advisory AD20020710, a remotely exploitable buffer overflow exists in the PGP Outlook Plug-in. By sending a specially crafted message to a victim, an attacker can execute arbitrary code on the target system. |
Impact
A remote attacker can execute arbitrary code on the target system with the privileges of the user running the PGP Outlook Plug-in. As a result, the attacker could do anything the victim could do, including reading sensitive data on the vulnerable system. |
Solution
Apply the patch. |
Vendor Information
821139
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was discovered by eEye Digital Security.
This document was written by Ian A Finlay.
Other Information
| CVE IDs: | CVE-2002-0685 |
| Severity Metric: | 21.00 |
| Date Public: | 2002-07-10 |
| Date First Published: | 2002-07-11 |
| Date Last Updated: | 2002-07-11 17:29 UTC |
| Document Revision: | 15 |