CVE-2012-6533
Symantec PGP Desktop and Encryption Desktop - Local Privilege Escalation via Buffer Overflow in pgpwded.sys
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-6533. PoCs published by Nikita Tarakanov.
AI-analyzed exploit summary This exploit targets a local buffer overflow vulnerability in Symantec Encryption Desktop (CVE-2012-6533) to achieve privilege escalation. It uses DeviceIoControl with a specific IO control code to overwrite the HalDispatchTable, leading to arbitrary code execution with elevated privileges.
Description
Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
Exploits (1)
This exploit targets a local buffer overflow vulnerability in Symantec Encryption Desktop (CVE-2012-6533) to achieve privilege escalation. It uses DeviceIoControl with a specific IO control code to overwrite the HalDispatchTable, leading to arbitrary code execution with elevated privileges.