PGP Desktop 9.0.6 Denial Of Service - ZeroDay
---------------------------------------------------
Advisory:
PGP Desktop 9.0.6 Denial Of Service Vulnerability.
Version Affected:
PGP Desktop 9.0.6 [Build 6060] (other version could be affected)
Component Affected:
PGPwded.sys
Release Date:
Release Date. 23 December ,2008
Description:
PGP Desktop 's PGPweded.sys Driver does not sanitize user supplied input
(IOCTL) and this lead to a Driver Collapse that propagates on the system with a
BSOD. Affected IOCTL is 0x80022038.
Proof-of-Concept:
<a
href="http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php";>Click
Here</a>
Credit:
Giuseppe 'Evilcry' Bonfa' (Team Lead, www.EvilFingers.com /
http://evilcry.netsons.org)
Disclaimer:
The information in the advisory is believed to be accurate at the time of
publishing based on currently available information. Use of the information
constitutes acceptance for use in an AS IS condition. There is no
representation or warranties, either express or implied by or with respect to
anything in this document, and shall not be liable for a ny implied warranties
of merchantability or fitness for a particular purpose or for any indirect
special or consequential damages.
---------------------------------------------------