CVE-2007-0603: pgp corporate_desktop
Vulnerability summary
CVE-2007-0603 is a high (CVSS 7.1) vulnerability in pgp corporate_desktop. EPSS estimates a 5.17% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities.
Timeline
- 30-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe, which allows remote authenticated users to gain privileges by sending a data object representing an absolute pointer, which causes code execution at the corresponding address.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.17%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.17% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Pgp1 product
1 vendor · 1 product
References
11 links- www.ngssoftware.com/advisories/medium-risk-vulnerability-in-pgp-desktop/X Refsource MISCVendor Advisory