CVE-2007-0603

CVE-2007-0603 describes a privilege escalation vulnerability in PGP Desktop versions prior to 9.5.1. The flaw allows remote authenticated users to execute arbitrary code by sending specially crafted data objects representing absolute pointers over named pipes to the PGPServ.exe or PGPsdkServ.exe processes, which fail to validate these objects. This vulnerability carries a CVSS score of 7.1, indicating high severity. It requires authenticated access and high attack complexity (AC:H), but successful exploitation grants complete confidentiality, integrity, and availability (C:C/I:C/A:C) of the affected system. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of older vulnerabilities.