CVE-2014-3431

Published: Jun 21, 2014Modified: May 6, 2026

4.3

Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 3.1 / Impact: 6.4

Source: NVD

Description

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.

Affected (14)

Products: Symantec: Encryption Desktop, Pgp Desktop

Symantec

2 products

Encryption Desktop

Pgp Desktop

Configuration A

14 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Symantec Encryption Desktop	Version 10.3.0
Symantec Encryption Desktop	Version 10.3.1
Symantec Encryption Desktop	Version 10.3.2
Symantec Encryption Desktop	Version 10.3.2 mp1
Symantec Pgp Desktop	Version 10.0.0
Symantec Pgp Desktop	Version 10.0.1
Symantec Pgp Desktop	Version 10.0.2
Symantec Pgp Desktop	Version 10.0.3
Symantec Pgp Desktop	Version 10.1.0
Symantec Pgp Desktop	Version 10.1.1
Symantec Pgp Desktop	Version 10.1.2
Symantec Pgp Desktop	Version 10.2.0
Symantec Pgp Desktop	Version 10.2.1
Symantec Pgp Desktop	Version 10.2.2