Read the docs
TI-2012-05251 Aliases CVE-2012-6533GHSA-r7gc-vqj2-3qmm

Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0…

Priority LOW 21CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.

Why it matters now

EPSS 0.0062 49th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:symantec:pgp_desktop:10.0.0:-:*:*:*:windows:*:*10.0.0VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.0.1:-:*:*:*:windows:*:*10.0.1VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.0.2:-:*:*:*:windows:*:*10.0.2VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.0.3:-:*:*:*:windows:*:*10.0.3VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.1.0:-:*:*:*:windows:*:*10.1.0VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.1.1:-:*:*:*:windows:*:*10.1.1VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.1.2:-:*:*:*:windows:*:*10.1.2VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.2.0:-:*:*:*:windows:*:*10.2.0VulnerableSymantec
cpe:2.3:a:symantec:pgp_desktop:10.2.1:-:*:*:*:windows:*:*10.2.1VulnerableSymantec
cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
  • cpe:2.3:a:symantec:pgp_desktop:10.0.0:-:*:*:*:windows:*:* Versions 10.0.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.0.1:-:*:*:*:windows:*:* Versions 10.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.0.2:-:*:*:*:windows:*:* Versions 10.0.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.0.3:-:*:*:*:windows:*:* Versions 10.0.3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.1.0:-:*:*:*:windows:*:* Versions 10.1.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.1.1:-:*:*:*:windows:*:* Versions 10.1.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.1.2:-:*:*:*:windows:*:* Versions 10.1.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.2.0:-:*:*:*:windows:*:* Versions 10.2.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:pgp_desktop:10.2.1:-:*:*:*:windows:*:* Versions 10.2.1 Vulnerable ·Symantec
  • cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:symantec:encryption_desktop:10.3.0:*:*:*:*:*:*:*10.3.0VulnerableSymantec
  • cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:symantec:encryption_desktop:10.3.0:*:*:*:*:*:*:* Versions 10.3.0 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6533
  2. 2026-10-03 Alias added: GHSA-r7gc-vqj2-3qmm

References

Advisory 1

  • TI-2016-05641 Improper privilege management in Symantec IT Management Suite CVSS 3.1HIGH 7.8
  • TI-2017-04160 Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a… CVSS 3.0MEDIUM 6.5
  • TI-2013-01417 Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x… CVSS 2.0MEDIUM 6.8
  • TI-2012-03706 Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop… CVSS 2.0MEDIUM 6.9
  • TI-2017-09960 In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type… CVSS 3.0MEDIUM 5.7
  • TI-2014-02766 Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x… CVSS 2.0MEDIUM 5.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences