Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when Automatically decrypt/verify when opening messages option is checked, Always use Secure Viewer when decrypting option is not checked, and the user replies to an encrypted message.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Personal_privacy | Pgp | 7.0 (including) | 7.0 (including) |
| Personal_privacy | Pgp | 7.0.3 (including) | 7.0.3 (including) |
| Personal_privacy | Pgp | 7.0.4 (including) | 7.0.4 (including) |