ASCII Armor parser in Windows PGP 7.0.3 and previous versions allows malicious users to create files in arbitrary locations via a malformed ASCII armored file.
source: wwwsecurityfocuscom/bid/2556/info
ASCII Armor is a text based encoding format used by PGP (Pretty Good Privacy) While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and public keys to facilitate transmission in e-mail messages
When a user opens a document for verification in PGP ...