CVE-2002-1696: Pgp Personal Privacy

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message.

Affected products

• Pgp Personal Privacy: version 7.0 only; version 7.0.3 only; version 7.0.4 only

Published 2002-12-31. Last modified 2026-06-16.