CVE-2014-3431: Symantec Encryption Desktop

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.

Affected products

• Symantec Encryption Desktop: version 10.3.0 only; version 10.3.1 only; version 10.3.2 only
• Symantec Pgp Desktop: version 10.0.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.1.0 only; version 10.1.1 only; …

Published 2014-06-21. Last modified 2026-06-17.