Vulnerabilities > Symantec > PGP Desktop

DATE CVE VULNERABILITY TITLE RISK
2014-08-22 CVE-2014-3436 Cryptographic Issues vulnerability in Symantec Encryption Desktop and PGP Desktop
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
network
low complexity
symantec CWE-310
5.0
2014-06-21 CVE-2014-3431 Permissions, Privileges, and Access Controls vulnerability in Symantec Encryption Desktop and PGP Desktop
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
local
low complexity
symantec apple CWE-264
4.3
2014-04-23 CVE-2014-1647 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Symantec Encryption Desktop and PGP Desktop
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
network
high complexity
symantec CWE-119
2.6
2014-04-23 CVE-2014-1646 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Symantec Encryption Desktop and PGP Desktop
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
network
high complexity
symantec CWE-119
2.6
2013-08-05 CVE-2013-1610 Local Privilege Escalation vulnerability in Symantec Encryption Desktop
Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
local
low complexity
symantec
6.8
2013-02-18 CVE-2012-6533 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Symantec Encryption Desktop and PGP Desktop
Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
4.4
2013-02-18 CVE-2012-4351 Numeric Errors vulnerability in Symantec Encryption Desktop and PGP Desktop
Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.
6.9