High severity7.3NVD Advisory· Published May 21, 2017· Updated May 13, 2026
CVE-2017-9046
CVE-2017-9046
Description
winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers the attack.
Affected products
1- cpe:2.3:a:pmail:pegasus:4.72:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- packetstormsecurity.com/files/142606/Pegasus-4.72-Build-572-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.