CVE-2008-5731

PGP Desktop 9.0.6 and 9.9.0 - Denial of Service via IOCTL Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5731. PoCs published by Evilcry.

AI-analyzed exploit summary This exploit demonstrates a local denial-of-service (DoS) vulnerability in PGP Desktop 9.0.6 by sending a malformed IOCTL request to the PGPwded.sys driver, causing a BSOD. The PoC uses the CreateFileA and DeviceIoControl APIs to trigger the vulnerability.

Description

The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a "Driver Collapse." NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Evilcry · phpdoswindows
https://www.exploit-db.com/exploits/7556

This exploit demonstrates a local denial-of-service (DoS) vulnerability in PGP Desktop 9.0.6 by sending a malformed IOCTL request to the PGPwded.sys driver, causing a BSOD. The PoC uses the CreateFileA and DeviceIoControl APIs to trigger the vulnerability.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: PGP Desktop 9.0.6 (Build 6060)
No auth needed
Prerequisites: Local access to the target system · PGP Desktop 9.0.6 installed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021493
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/499572/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33310
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/7556
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32991
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4811
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/50914

Scores

EPSS 0.0090
EPSS Percentile 54.8%

Details

CWE
CWE-399
Status published
Products (2)
pgp/desktop 9.0.6
pgp/desktop 9.9.0
Published Dec 26, 2008
Tracked Since Feb 18, 2026