Symantec Pgp Desktop vulnerabilities

7 CVEs affecting Symantec Pgp Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3436, published 2014-08-22.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3436, published 2014-08-22. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted…
• CVE-2014-1647, published 2014-04-23. Low severity, CVSS 2.6. EPSS: 0.7% chance of exploitation in the next 30 days. Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of…
• CVE-2014-1646, published 2014-04-23. Low severity, CVSS 2.6. EPSS: 0.7% chance of exploitation in the next 30 days. Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of…
• CVE-2012-6533, published 2013-02-18. Medium severity, CVSS 4.4. EPSS: 0.6% chance of exploitation in the next 30 days. Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
• CVE-2013-1610, published 2013-08-05. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a…
• CVE-2012-4351, published 2013-02-18. Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days. Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.
• CVE-2014-3431, published 2014-06-21. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended…