CVE-2002-0685: Pgp Desktop Security

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.

Affected products

• Pgp Desktop Security: version 7.0.4 only
• Pgp Freeware: version 7.0.3 only
• Pgp Personal Security: version 7.0.3 only

Published 2002-07-23. Last modified 2026-06-16.