COMMAND

	PGP Outlook encryption plug-in remote overflow via malocious mail

SYSTEMS AFFECTED

	 NAI PGP Desktop Security 7.0.4

	 NAI PGP Personal Security 7.0.3

	 NAI PGP Freeware 7.0.3

	 This issue does not affect PGP Corporate Desktop users.

	

	

PROBLEM

	Marc Maiffret of eeye [http://www.eeye.com] issued an  advisory  stating
	it\'s possible to remotely overflow Outlook PGP  plugin\'s  and  execute
	code.
	

	

	http://www.eeye.com/html/Research/Advisories/AD20020710.html

	

	

	No exploit was released yet.

SOLUTION

	Download the patch from:
	

	http://www.nai.com/naicommon/download/upgrade/patches/patch-pgphotfix.asp