Pgp Desktop

pgp_desktop

Vendor: Symantec • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3436 1Symantec 2Encryption Desktop Pgp Desktop May 6, 2026 Aug 22, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail messa...Show more Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.Show less
CVE-2014-3431 1Symantec 2Encryption Desktop Pgp Desktop May 6, 2026 Jun 21, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file readi...Show more Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.Show less
CVE-2014-1647 1Symantec 2Encryption Desktop Pgp Desktop May 6, 2026 Apr 23, 2014 N/A· v4 N/A· v3 2.6 LOW· v2 Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access vi...Show more Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.Show less
CVE-2014-1646 1Symantec 2Encryption Desktop Pgp Desktop May 6, 2026 Apr 23, 2014 N/A· v4 N/A· v3 2.6 LOW· v2 Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access viola...Show more Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.Show less
CVE-2013-1610 1Symantec 2Encryption Desktop Pgp Desktop Apr 29, 2026 Aug 5, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse applicatio...Show more Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.Show less
CVE-2012-6533 1Symantec 2Encryption Desktop Pgp Desktop Apr 29, 2026 Feb 18, 2013 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
CVE-2012-4351 1Symantec 2Encryption Desktop Pgp Desktop Apr 29, 2026 Feb 18, 2013 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.