CVE-2002-0685

CVE-2002-0685 describes a heap-based buffer overflow in the message decoding function of the PGP Outlook Encryption Plug-In, affecting NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3. This vulnerability allows remote attackers to modify the heap and gain privileges by sending a large, malformed email message. With a CVSS score of 7.5, it is considered highly severe due to its network attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit module, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.