Description
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- PGP Desktop 9.0.6 - 'PGPwded.sys' Local Denial of Service EDB-7556 · dos · Dec 23, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1021493 vdb-entry
- 20081223 PGP Desktop 9.0.6 Denial Of Service - ZeroDay mailing-list
- http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php
- 33310 third-party-advisory
- 7556 exploit
- 32991 vdb-entry
- 4811 third-party-advisory
- 50914 vdb-entry
- http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.php