PGP app yields remote root on Windows
Patch early, patch often
Posted in Software, 6th September 2002 11:00 GMT
Free whitepaper – Ensuring high service levels in cloud computing
A curious flaw in a PGP application's handling of file names could allow an attacker to own a remote Windows machine with a malicious, encrypted archive.
File names over 200 characters in length will cause a buffer overflow, which, if exploited properly, could allow running arbitrary code on the target machine.
A typical attack would involve sending an encrypted archive to a victim via email. The archive itself would have a reasonably short name to avoid suspicion. But within it would be an encrypted file with a name exceeding 200 characters which would cause the desired overflow.
The flaw affects PGP Corporate Desktop 7.1.x. for Windows. A patch has been developed by former PGP owner Networks Associates, and is available here. ®

Buyer's Guide: ERP Systems
Analyst Keynote: The Register Agile Data Center Summit
Checklist: Midmarket ERP Solutions
The Register Agile Data Center Summit
10 Strategies for Choosing a Midmarket ERP Solution
Office 2010 fights Google with SharePoint bloat
Ubuntu's Karmic Koala bares fangs at Windows 7
Icon design for
Microsoft 'Dallas' muscles Google data crusade