← Database

CVE-2009-0681

HIGH CVSS: 7.2 Published: 2009-04-15 Modified: 2026-06-16

Description

PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.

Affected Platforms

Pgp Desktop

Weakness Type

CWE-20

References